In this GovCon Bulletin,™ we discuss the 20-year SBIR/STTR protection under the SBIR/STTR policy directive, the FAR Council's failure to update the SBIR data rights clause to reflect that protection period, and what contractor's can do if solicitations and proposed agreements only refer to the outdated protection period in the FAR SBIR data rights clause.