FAR 52.240-91 in the FAR overhaul: a new number in the deviation text, proposed 52.240-3

FAR 52.240-91 Security Prohibitions and Exclusions. New in the overhaul, no codified number, as the deviation text and GSA table list it; confidence high. As at 27 Sep 2026.

Codifiednoneno codified predecessor number

Under the deviation52.240-91RFO model deviation text, FAR Part 52 (issued 28 Oct 2025, updated 1 Jul 2026)

Proposed permanent number52.240-391 FR 37550, 23 Jun 2026

New means new in the overhaul, no codified number.

Sources last checked 27 Sep 2026 (dataset version 1). What changed and when. An existing contract's clauses are not rewritten by a later deviation or proposed rule; they change only by modification.

What the source says changed

No official source in the set states what changed in the text; the number and title are as listed.

Why this disposition

RFO model Part 52 lists 52.240-91; GSA P&C Table disposition "Added"; GSA note: Replaces the following clauses: *52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by *Kaspersky Lab Covered Entities *52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. *52.204-27, Prohibition on a ByteDance Covered Application. *52.204-28, Federal Acquisition Supply Chain Security Act Orders-Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts. *52.204-30, Federal Acquisition Supply Chain Security Act Orders-Prohibition. *52.225-13, Restrictions on Certain Foreign Purchases. *52.240-1, Prohibition on Unmanned Aircraft Systems Manufactured or Assembled by American Security Drone Act-Covered Foreign Entities.

Confidence: high. Read from an official table or the deviation or rule text itself.

Codified predecessors

52.204-23 Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities, merged into another clause in the deviation text
52.204-25 Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment, merged into another clause in the deviation text
52.204-27 Prohibition on a ByteDance Covered Application, merged into another clause in the deviation text
52.204-28 Federal Acquisition Supply Chain Security Act Orders-Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts, merged into another clause in the deviation text
52.204-30 Federal Acquisition Supply Chain Security Act Orders-Prohibition, merged into another clause in the deviation text
52.225-13 Restrictions on Certain Foreign Purchases, merged into another clause in the deviation text
52.240-1 Prohibition on Unmanned Aircraft Systems Manufactured or Assembled by American Security Drone Act-Covered Foreign Entities, merged into another clause in the deviation text

Titles and where each is prescribed

under the deviation: Security Prohibitions and Exclusions
proposed: Security Prohibitions and Exclusions
prescribed at 40.205(b) (deviation text)

The proposed rule's words: Same codified predecessor(s) 52.204-23, 52.204-25, 52.204-27, 52.204-28, 52.204-30, 52.225-13, 52.240-1 map to 52.240-3 in FR 2026-12559; titles match (Security Prohibitions and Exclusions)

Which agencies

DoD adopted the FAR Part 52 deviation text by class deviation 2026-O0038, effective 1 Feb 2026. GSA's provision and clause table lists this clause effective 3 Nov 2025. Confirm which deviation your contracting officer's agency has adopted.

The 33 agencies acquisition.gov lists as having issued a class deviation for FAR Part 40 (first issued August 14, 2025)

Consumer Financial Protection Bureau (CFPB); National Labor Relations Board (NLRB); Department of Energy DOE; National Science Foundation (NSF); Office of Personnel Management (OPM); Department of the Interior (DOI); Pension Benefit Guaranty Corporation (PBGC); Department of Defense (DoD); Housing and Urban Development (HUD); Department of Labor (DOL); Millennium Challenge Corporation (MCC); Department of Homeland Security (DHS); National Archives and Records Administration (NARA); United States Department of the Treasury; Environmental Protection Agency (EPA); Department of Education (ED); Merit Systems Protection Board (MSPB); Department of State (DOS); National Aeronautics and Space Administration (NASA); Udall Foundation (UDALL); Social Security Administration (SSA); Health and Human Services (HHS); Department of Justice (DOJ); Department of Transportation (DOT); Securities and Exchange Commission (SEC); Consumer Product Safety Commission (CPSC); Department of Veterans Affairs (VA); Nuclear Regulatory Commission (NRC); United States Department of Agriculture (USDA); Commodity Futures Trading Commission (CFTC); General Services Administration (GSA); Department of Commerce (DOC); Federal Communications Commission (FCC).

Subcontractors

Tracking which subcontractors have declared a current SPRS assessment for this clause: Subcontractor CMMC Tracker

What flows down

Under the deviation text: flows down under its own paragraph (j). The Contractor shall insert the substance of this clause, including this paragraph (j) but excluding subparagraphs (d)(1) and (i)(1), in all subcontracts and other contractual instruments, including subcontracts for acquiring commercial products or commercial services.
Commercial products and services: not stated in the paragraph. COTS items: not stated in the paragraph. What goes down: the substance of the clause. FAR Overhaul - Part 52, Solicitation Provisions and Contract Clauses (RFO model deviation text) issued 28 Oct 2025, updated 1 Jul 2026

Sources, with their dates

FAR Overhaul - Part 52, Solicitation Provisions and Contract Clauses (RFO model deviation text) issued 28 Oct 2025, updated 1 Jul 2026
GSA RFO Part 52 Provision and Clause Table 1 Apr 2026, disposition "Added"
DoD RFO class deviation file: 2026-O0038_TAB_A_Deviation_Memo_Part_52.pdf 20 January 2026, effective 1 Feb 2026
Federal Acquisition Regulation: Revolutionary Federal Acquisition Regulation Overhaul Parts 1, 2, 4, 33, 39, 40, and 53 23 Jun 2026, 91 FR 37550, FAR Case 2026-001

Questions

What is FAR 52.240-91 called after the FAR overhaul?

FAR 52.240-91 in the FAR overhaul: a new number in the deviation text, proposed 52.240-3. The codified number is none; the deviation text lists 52.240-91; the proposed rule 91 FR 37550 lists 52.240-3. As at 27 Sep 2026.

Which number does a contract carry for FAR 52.240-91 after the FAR overhaul?

Which number a given contract carries depends on the deviation the contracting agency has adopted and the date of the solicitation or modification. DoD adopted the FAR Part 52 deviation text effective 1 Feb 2026. Confirm which deviation your contracting officer's agency has adopted.

Is the change to FAR 52.240-91 final?

No final FAR overhaul rule had been published in the Federal Register as at 27 Sep 2026. The proposed rule 91 FR 37550 lists 52.240-3.

Read your whole list: run 52.240-91 in the finder, or paste every clause of a contract, flow-down exhibit or template on the landing page. As at 27 Sep 2026.