Agmt18 Raycom Data Technologies Inc.

Browse Search

17. User Data and Data Privacy 17. 1 Data Ownership. The City will own all right, title and interest in its data that is related to the Services provided by this Agreement. Consultant shall not access City user accounts or City Data, except (1 ) as necessary to provide the Services, (2) in response to service or technical issues, (3) as required by the express terms of this Agreement or (4) at the City's written request. Upon expiration or termination of the Agreement, Consultant shall return materials that contain any confidential information to the City. 17.2 Data Protection. Protection of personal privacy and data shall be an integral pad of the business activities of Consultant to ensure there is no inappropriate or unauthorized use of City's data at any time. To this end, Consultant shall safeguard the confidentiality, integrity, and availability of City information and City Data and comply with the following conditions: i. Consultant shall implement and maintain appropriate administrative, technical and organizational security measures to safeguard against unauthorized access, disclosure or theft of Personal Data and Non-Public Data. Such security measures shall be in accordance with recognized industry practice and not less stringent than the measures Consultant applies to its own Personal Data and Non-Public Data of similar kind. ii. All data obtained by Consultant in the performance of this Agreement shall become and remain the property of the City. iii . All Personal Data and Non-Public Data shall be encrypted at rest and in transit with controlled access. Unless otherwise stipulated, Consultant is responsible for encryption of the Personal Data and Non-Public Data . iv. For data at rest, Consultant shall ensure hard drive encryption consistent with validated cryptography standards as referenced in FIPS 140-2, Security Requirements for Cryptographic Modules for all Personal Data . v. At no time shall any data or processes — that either belong to or are intended for the use of the City or its officers, agents or employees be copied , disclosed or retained by Consultant or any party related to Consultant for subsequent use in any transaction that does not include the City. vi. Consultant shall not use any information collected in connection with the Services issued from this Agreement for any purpose other than fulfilling the Services. REV: 06-19-18 PR Page 6 of 23 ATTY/AGR.2018. 132/Raycom Data Technologies, Inc.