When a component contracts for the operation of a system of records, to accomplish a Treasury function, the provisions of the Privacy Act and this subpart must be applied to such system. The relevant component is responsible for ensuring that the contractor complies with the contract requirements relating to privacy.
31 C.F.R. §1.30