DFARS 215.470(b) states: "When data are required to be delivered under a contract, include DD Form 1423, Contract Data Requirements List, in the solicitation." Note that the DFARS mentions including the CDRL in the solicitation, as it establishes deliverables in the basic contract. Not including the CDRL in the basic contract may render it legally unenforceable at the task order level. However, a CDRL could be added to a task order as a bilateral modification. This ACQuipedia article provides additional information on the CDRL you may find helpful.