; (ii) identifying whether such denial is from the prime contractor or subcontractor; and (iii) developing an appropriate timeframe for requiring submission of uncertified cost or pricing data before a request for such data is considered a denial, including a standardized determination of a starting point and conclusion for such requests. . 803. Prohibition on the transfer of certain data on employees of the Department of Defense to third parties Chapter 363 of title 10, United States Code, is amended by adding at the end the following new section: 4662. Prohibition on the transfer of certain data on employees of the Department of Defense to third parties (a) In general Each contract entered into by the Department of Defense on or after the date of the enactment of this section shall include a provision prohibiting the contractor and each subcontractor under such contract from selling, licensing, or otherwise transferring covered individually identifiable Department employee data to any individual or entity other than the Federal Government, except to the extent required to perform such contract or a subcontract under such contract and that would be permissible pursuant to statute or guidance from the Director of the Office of Management and Budget. (b) Waiver The Secretary of Defense may waive the requirements of subsection (a) with respect to a sale, licensing, or other transfer of covered individually identifiable Department employee data if the Secretary determines that such waiver is appropriate. (c) Definitions In this section: (1) The term covered individually identifiable Department employee data means individually identifiable Department employee data obtained by— (A) a contractor pursuant to the performance of a contract described in subsection (a) by such contractor