Cybersecurity & Supply Chain (Parts 4 / 39 / DFARS 204)

FAR 52.204-27

Prohibition on a ByteDance Covered Application

Implements the 'No TikTok on Government Devices Act' (Public Law 117-328 Division R). Prohibits the contractor and its personnel from having or using any ByteDance-covered application (most notably TikTok) on any IT used in performance of the contract — Government-furnished or contractor-owned.

FAR / DFARS Part
FAR Part 4 — Administrative and Information Matters
Prescribed By
FAR 4.2203 — Required in all solicitations and contracts (final rule effective June 2, 2023).
Flow-down to Subcontracts

Yes — flow down to all subcontracts (including commercial-item subs) per 52.204-27(c).

What this clause requires

  • 1Prohibit TikTok and any other ByteDance-covered application on devices used in contract performance.
  • 2Prohibit on Government-furnished equipment AND contractor-owned equipment used for the contract.
  • 3Flow down to all subcontracts at all tiers, including commercial-item subs.
  • 4Apply at all dollar values, including micro-purchase.

When this clause applies

All solicitations and contracts issued on/after June 2, 2023. No dollar threshold.

Common pitfalls

!Forgetting BYOD devices — if employees use personal phones for any contract work, those phones are covered.
!Missing flow-down to commercial-item subs — paragraph (c) requires it.
!Treating 'covered application' narrowly — the OMB list is broader than TikTok itself and may expand.

Proposal-team checklist

  • ☐Update IT acceptable-use policy to prohibit TikTok on any device used for Federal contract work.
  • ☐Add 52.204-27 flow-down to all subcontract templates.
  • ☐Brief project teams during kickoff — including BYOD policy.

Stop tracking clauses in spreadsheets.

BidCraft auto-detects every FAR / DFARS clause in your RFP, builds the compliance matrix, and structures the response. Try free.

Generate a Proposal →

FAQ

Does this apply to personal phones?

Yes if the personal phone is used to perform any aspect of the contract. The OMB guidance is broad — better to require segregation between personal devices and contract work.

Are there waivers?

Narrow waivers for law enforcement, national security, and research purposes. Most contractors will not qualify.

Related clauses

FAR 52.204-25
Section 889 Part A & B Prohibition
FAR 52.204-24
Section 889 Part B Representation
FAR 52.204-26
Covered Telecom — Annual SAM Rep
DFARS 252.204-7012
Cyber Incident Reporting (DoD)

Home · All FAR Clauses · Government RFP · Sample Proposal

Reference content based on the Federal Acquisition Regulation and DFARS as of June 2026. Always verify the current clause text at acquisition.gov before relying on it for an actual submission. Educational reference; not legal advice.