On December 18, 2025, the Fiscal Year 2026 National Defense Authorization Act (FY2026 NDAA) became law. True to each year’s NDAA being a sprawling piece of legislation, the FY2026 NDAA contains many priorities of the current Administration. Nestled among its myriad provisions, federal grant recipients should take note of Section 230, the “Prohibition on Modification of Indirect Cost Rates for Institutions of Higher Education and Nonprofit Organization.” This section provides a speed bump for rapid changes to indirect cost rates for Department of Defense grantees and reflects congressional sympathy to grantee concerns, particularly those of institutes of higher education (IHEs).Continue Reading College Prep: What Colleges with DoD Grants Should Do Now Under the FY2026 NDAA
Federal government
DOJ Launches New Data Security Program—What Your Company Needs to Know
The US Department of Justice’s (DOJ) new Data Security Program (DSP), designed to protect sensitive information and national security-related data from misuse by foreign actors, took full effect on October 6, 2025. The program introduces new restrictions on how companies handle and share sensitive US personal data and government-related data, especially when certain foreign entities are involved. With enforcement underway, companies should understand who is covered, what activities are restricted, and what compliance measures are required. Failure to comply with the rules can result in civil or criminal penalties.Continue Reading DOJ Launches New Data Security Program—What Your Company Needs to Know
Total GSA Schedule Makeover: Incoming Mass Mod Not Merely a Refresh
The Federal Acquisition Service (FAS) of the General Services Administration (GSA) revealed on October 17, 2025, that it will issue a Multiple Award Schedule (MAS) Solicitation 47QSMD20R0001 “refresh” sometime in November 2025. While GSA allowed the contracting community 10 business days to submit comments—until October 31, 2025—as MAS contract holders know, GSA issues refreshes from time to time so that changes are made uniformly in recognition of shifts in policy, regulations, or statutes. Administering MAS contracts in this way allows GSA to curate terms in a consistent manner for contractual vehicles at all stages of performance, as contractors perform orders at different times.Continue Reading Total GSA Schedule Makeover: Incoming Mass Mod Not Merely a Refresh
Feature Comment: CMMC Crosses The Finish Line—But Defense Contractors’ Race Ain’t Over
The DoD has finally crossed the CMMC finish line, but for contractors, the race is just beginning. With the Final Rule effective Nov. 10, award eligibility will hinge on a “current” CMMC status in SPRS, backed by annual affirmations and strict compliance. The next two months are critical for getting race-ready. In this Featured Comment…
Summer Sun, Something’s Begun, But (Oh, Oh) Those FAR Part 12 Rewrites
As we have previously covered in this blog, as a result of President Trump’s executive order, Restoring Common Sense to Federal Procurement, the Federal Acquisition Regulation (FAR) is undergoing an extensive and unprecedented rewrite. While many of us were enjoying the relaxation of summer days (drifting away to summer nights), the Trump administration has been busy issuing rolling updates to the FAR, which are poised to dramatically reshape the federal acquisition landscape. On August 14, 2025, the FAR Council told us more (told us more) by issuing draft revisions to FAR Parts 4, 8, 12, and 40. The revisions to FAR Part 12 are particularly noteworthy, as they go to the heart of the executive order’s policy statement that the federal procurement system should be “agile, effective, and efficient” and that “undue barriers” should be removed from federal procurement.Continue Reading Summer Sun, Something’s Begun, But (Oh, Oh) Those FAR Part 12 Rewrites
Power Up: What the AI Action Plan Means for the Energy Sector
July’s “Winning the Race: America’s AI Action Plan,” released by the White House, contains helpful recommendations for the energy sector as the use of AI becomes more prevalent and, with it, the need for more energy. The plan recommends the use of an existing consultation and coordination process for expediting the federal permitting and review of large infrastructure projects to cover all eligible data center and data center energy projects. It also recommends optimizing existing grid resources, prioritizing the interconnection of reliable power sources, ensuring sufficient generation exists to support data centers, and embracing new technology and sources of energy.Continue Reading Power Up: What the AI Action Plan Means for the Energy Sector
Making Hay of the Interplay Between the TAA and BAA—COFC Sustains Protest Against the VA’s Improper Sourcing of a Critical Pharmaceutical
On July 31, 2025, the Court of Federal Claims (COFC) issued its decision in The DaVinci Company v. United States. The case is noteworthy for contractors grappling with geographical supply chain concerns because it elucidates the extent to which two cornerstone country-of-origin procurement statutes—the Buy American Act (BAA) and the Trade Agreements Act (TAA)—can be misunderstood and misapplied by the government.Continue Reading Making Hay of the Interplay Between the TAA and BAA—COFC Sustains Protest Against the VA’s Improper Sourcing of a Critical Pharmaceutical
FAR 2.0 Part 39 in Arcade Mode—How Federal IT Acquisition Just Hit Reset
For those who grew up gripping a joystick and dodging alien fire in Defender, riding ostriches through floating platforms in Joust, or crossing a hectic freeway in Frogger, winning wasn’t about memorizing rules; it was about adapting fast, reading the patterns, and leveling up. That same urgency now applies to federal information and communication technology (ICT) contractors. A sweeping overhaul of FAR Part 39 has just been released, and while it may not blink and beep like a cabinet in a darkened arcade, it’s just as demanding. There’s no attract mode here. The game has already started.Continue Reading FAR 2.0 Part 39 in Arcade Mode—How Federal IT Acquisition Just Hit Reset
Feature Comment: The CUI Program: DOD, We Have a Problem
The U.S. Department of Defense’s Cybersecurity Maturity Model Certification (CMMC) Program will become operational at some point in fiscal year 2025. In October, the DOD issued a Final Rule to address evolving cybersecurity requirements and cyber threats while defining the security controls that DOD intends defense contractors and subcontractors to implement. The program will require…
Wisconsin Bell: Testing the Elasticity of False Claims Act’s Scope
Just how broad is the scope of the False Claims Act (FCA)? That is the basic question posed in Wisconsin Bell, Inc. v. U.S. ex rel. Heath, No. 23-1127. Put more directly, the case addresses whether reimbursement requests under the Schools and Libraries Universal Service Support program—better known as the E-Rate program—are actionable “claims” exposed to liability under the FCA. But when the US Supreme Court hears oral argument next month, the justices will grapple with broader questions with implications far beyond this case: (1) when does the government “provide” money in any transaction or program so that FCA liability attaches; (2) when is an independent government-sponsored enterprise (e.g., Fannie Mae/Freddie Mac) acting as an “agent” of the United States for FCA purposes; and (3) to what extent do those who deal with private entities established or chartered pursuant to federal law need to watch this case to determine their potential exposure under the FCA and its panoply of enforcement mechanisms?Continue Reading Wisconsin Bell: Testing the Elasticity of False Claims Act’s Scope
