FAR Mandatory Disclosure Rule for Federal Contractors

The FAR mandatory disclosure rule requires federal contractors with contracts over $7.5 million and a performance period of 120 days or more to notify the agency’s Office of the Inspector General, in writing, whenever they find credible evidence that someone connected to the contract committed fraud, bribery, a conflict of interest, a gratuity violation, or a False Claims Act violation.¹ The rule is codified in FAR clause 52.203-13, and the obligation lives on for at least three years after the government makes final payment.² Skip the disclosure and you can be suspended or debarred, effectively locked out of federal work.

Which Contracts Are Covered

Two conditions have to be met at the same time: the anticipated contract value has to exceed $7.5 million, and the performance period has to be 120 days or longer.¹ The dollar threshold rose from $6 million in October 2025 as part of the FAR’s periodic inflation adjustment.³ Prime contractors and subcontractors both fall under the rule, and the obligation flows down the subcontract chain.

Small businesses and contracts for commercial products or commercial services get a partial break, but a narrower one than most people assume. They are exempt from the internal compliance program requirements described later, but they are still bound by the core disclosure duty itself if the contract clears the value and duration thresholds.² A contracting officer can still write the clause into a commercial-item contract, so read the solicitation before assuming you are out.

What You Have to Disclose

The rule targets two categories of wrongdoing tied to a federal contract’s award, performance, or closeout:²

Federal criminal law violations under Title 18, covering fraud, conflicts of interest, bribery, and gratuity violations. Kickbacks to a government official, manipulated billing records, and steering awards to favored parties all sit here.
Civil False Claims Act violations under 31 U.S.C. 3729–3733, which reach anyone who knowingly submits a false or fraudulent claim for payment, uses a false record to get a claim paid, or avoids an obligation to return money owed to the government.

The rule reaches misconduct by anyone connected to the contract: employees, principals, agents, and subcontractors.² A prime contractor cannot dodge disclosure by pointing at a subcontractor. If your subcontractor committed fraud on your contract and you have credible evidence of it, reporting is your job.

There is a separate, related duty worth knowing about. Under the FAR’s payment clauses, contractors also have to return significant overpayments, and knowingly failing to disclose credible evidence of one can trigger suspension or debarment on its own, even without any fraud.⁴

When “Credible Evidence” Starts the Clock

The trigger is credible evidence. That standard sits between a vague rumor and proof beyond a reasonable doubt. You do not need certainty, but you need more than a hunch. Once a reasonable person reviewing what you have would conclude a violation likely happened, the disclosure obligation is live. Waiting to finish a months-long internal investigation before saying anything is risky if the evidence was already credible early on.

The FAR requires disclosure to be “timely” without defining a specific number of days.² The ambiguity is deliberate, and it puts the risk on you. The safer approach is to disclose as soon as the evidence is credible and supplement later as your investigation develops. Sitting on credible evidence while you build a polished report is exactly the pattern that turns a disclosure problem into a non-disclosure problem.

The obligation begins when the contract is signed and runs for at least three years after the government makes final payment.² If, two years after final payment, you discover an employee had been submitting inflated invoices back during performance, the duty still applies. Companies that close out their contract files and stop looking when the work ends are exposed here.

How to File the Disclosure

Disclosures go in writing to the agency’s Office of the Inspector General, with a copy to the Contracting Officer.² That second copy is the detail contractors most often miss. Many agencies run their own online submission portals and disclosure forms. If the agency does not offer an electronic portal, use a delivery method that gives you proof of receipt.

Whichever channel you use, be ready to provide:

The contract number for every affected contract or subcontract
A detailed narrative of the violation, including when and how it was discovered
Names of all individuals involved
An estimate of the monetary loss to the government
A description of any corrective actions already taken
Contact information for the company’s legal representative

Gather this internally before you reach out. An incomplete submission slows the review and raises questions about whether you are cooperating in good faith. The OIG will typically assign a case number and acknowledge receipt.

What Full Cooperation Requires

After you file, the rule expects “full cooperation” with the government’s review. Under the FAR, that means giving the government enough information to identify what happened and who was responsible, and responding promptly to requests for documents and employee interviews.²

The definition has limits. Full cooperation does not require you to waive attorney-client privilege or attorney work product protections. Individual officers and employees keep their Fifth Amendment rights. You can still run your own internal investigation and defend yourself in any proceeding or contract dispute that follows.² In practice, you cooperate on document production and employee access while counsel protects privileged communications.

What Happens If You Stay Silent

The government does not treat non-disclosure as a technicality. A contractor who knew about a violation and stayed quiet often ends up worse off than one that reported the underlying misconduct.

The primary tools are suspension and debarment. Suspension is a temporary exclusion from new federal contracts during an investigation. Debarment is longer, generally capped at three years, and blocks the company from new awards for the full period.⁵ Both also stop the company from acting as an agent or subcontractor on someone else’s government contract. For a business that lives on federal work, that reach is existential.

Neither action automatically terminates the existing contracts. The agency head makes a separate call on whether to continue, modify, or terminate current awards.⁶ If an agency terminates for default, the contractor can be on the hook for the added cost of reprocuring the services from someone else.

Performance records take the hit too. The Contractor Performance Assessment Reporting System includes a Regulatory Compliance evaluation area that looks specifically at whether the contractor met reporting requirements under the contract. A poor rating there follows the company into competitive procurements for years afterward. All of that sits on top of any criminal prosecution or civil enforcement the government brings for the underlying violation.

The Internal Compliance Program You Also Have to Build

If you are not a small business and not on a commercial-items contract, FAR 52.203-13 layers a compliance infrastructure requirement on top of the reporting duty itself. It comes in two parts.

Written Code of Business Ethics and Conduct

Within 30 days of contract award you need a written code of business ethics and conduct, and you have to distribute a copy to every employee working on the contract.² The FAR does not dictate exact contents, but the code has to promote ethical conduct and legal compliance. An existing corporate code can satisfy this, as long as it actually reaches contract employees and is not just posted on a company intranet.

Internal Control System

Within 90 days of contract award, you need an internal control system covering:²

Senior-level ownership of the compliance program by someone with real authority and resources
Reasonable efforts not to place people in principal roles when a background check would have flagged prior ethical violations
Periodic monitoring and auditing of business practices to detect criminal conduct, evaluate program effectiveness, and assess risk
An anonymous or confidential reporting mechanism that employees know about and are encouraged to use
Disciplinary procedures for improper conduct and for failing to take reasonable steps to prevent or detect it
Ongoing ethics and compliance training for principals, employees, and, where appropriate, agents and subcontractors

This is where contractors trip up most often. A binder on a shelf will not do. The government expects a working program with real audits, real training, and a reporting channel employees actually trust.

Whistleblower Protections for Employees

Federal law separately protects employees who report contractor misconduct, and those protections apply whether or not the employer’s own disclosure duty has been triggered. Under 41 U.S.C. 4712, employees of contractors, subcontractors, and grantees cannot be fired, demoted, or otherwise punished for disclosing information they reasonably believe shows gross mismanagement of a federal contract, waste of federal funds, an abuse of authority, a substantial danger to public health or safety, or a violation of any law or regulation related to a federal contract.⁷

Protected disclosures can be made to Members of Congress, an Inspector General, the Government Accountability Office, federal employees responsible for contract oversight, law enforcement officials, or a management official within the contractor’s own organization who has authority to investigate misconduct.⁷

An employee who suffers retaliation can file a complaint with the relevant agency’s Inspector General within three years of the reprisal. If the agency finds retaliation, it can order reinstatement, back wages, compensatory damages, and legal fees. If the agency has not acted within 210 days, the employee can take the case to federal district court.⁷ These rights cannot be waived by an employment agreement or company policy, so a broad non-disclosure clause will not shield a contractor from a retaliation claim.

Contractors are required to inform employees of these rights in writing and in the predominant language of the workforce.⁷ That notification piece is easy to overlook when the compliance focus is on disclosure mechanics alone.

1
Acquisition.GOV. FAR 3.1004 – Contract Clauses
2
Acquisition.GOV. FAR 52.203-13 – Contractor Code of Business Ethics and Conduct
3
Federal Register. Federal Acquisition Regulation – Inflation Adjustment of Acquisition-Related Thresholds
4
Acquisition.GOV. FAR 3.1003 – Requirements
5
Acquisition.GOV. FAR Subpart 9.4 – Debarment, Suspension, and Ineligibility
6
Department of the Interior. FAQ – Suspension and Debarment
7
Office of the Law Revision Counsel. 41 USC 4712 – Enhancement of Contractor Protection From Reprisal for Disclosure of Certain Information