The Wait Is Over: Final DFARS Safeguarding Rule Published Today
Client Alert | 1 min read | 10.21.16
Almost three years after its first iteration was published, DoD has finalized the DFARS Safeguarding Rule and corresponding DFARS clauses regarding the protection of “covered defense information” provided to or generated by defense contractors. Effective today, the Final Rule by and large reflects the same requirements of its interim versions and FAQs but with a few notable exceptions, including the definition of “covered defense information” now encompasses all forms of “controlled unclassified information” and thus aligns with the National Archive’s recent final rule, external cloud services housing covered defense information must comply with certain FedRAMP security requirements, and subcontractors must notify their primes when requesting variances from the security controls of NIST Special Publication 800-171.
Contacts

Partner, Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 6 min read | 11.25.25
Brussels Court Clarifies the EU’s SPC Manufacturing Waiver Regulation Rules
On November 13, 2025, the president of the French-speaking Brussels Enterprise Court ruled in the long-running battle between Sandoz and Regeneron about the correct interpretation of the EU’s Supplementary Protection Certificate (SPC) Manufacturing Waiver Regulation regarding exports to a non-EU market. The Brussels Court dismissed Regeneron’s claim that Sandoz had provided a defective notification and agreed with Sandoz’s interpretation of the Regulation.
Client Alert | 3 min read | 11.24.25
Client Alert | 7 min read | 11.24.25
Draft Executive Order Seeks to Short-Circuit AI State Regulation
Client Alert | 5 min read | 11.24.25
Qatar Enacts Law No. (22) of 2025 on Persons with Disabilities
