48 C.F.R. § 224.103
224.103 Procedures.
(b)(2) DoD rules and regulations are contained in DoDI 5400.11, DoD Privacy and Civil Liberties Programs; DoD 5400.11-R, Department of Defense Privacy Program; and DoDM 5400.11, DoD Privacy and Civil Liberties Programs: Breach Preparedness and Response Plan.