Agmt19 Equipped Systems Inc. - Laserfiche WebLink

Browse Search

Data"). These measures are designed to protect the integrity of Pilot Data and guard against unauthorized or unlawful access. 13.2 Electronic Commerce. Vendor shall protect Pilot Data in accordance with the Payment Card Industry Data Security Standard on behalf of the City, relating to City activities when cardholder informatir.n entered, accessed, transferred, stored or processed by Vendor or through their syster i. 13.3 Confidential Information. Vendor shall treat all information and data, including but not limited to remote access, such as instructions, user IDs and Passwords, as Confidential Information. In no case shall Vendor allow a third party access to City or customer information or Pilot Data, including but not limited to proprietary Confidential Information, without the express written consent of the City. 13.4 Data Access. Protection of personal privacy and data shall be an integral part of the business activities of Vendor to ensure there is no inappropriate or unauthorized access or use of Pilot Data at any time. To this end, Vendor shall safeguard the confidentiality, integrity and availability of City Data and comply with the following conditions: 13.4.1 Vendor shall implement and maintain appropriate technical, administrative, and organizational security measures to safeguard against unauthorized access, disclosure or theft of Pilot Data. Such security measures shall be in accordance with recognized industry practice. 13.4.2 At no time shall any Pilot Data or processes be copied, disclosed, sold, or retained by Vendor or any patty related to Vendor for subsequent use in any transaction that does not include the City without the City's express written consent. 13.4.3 Vendor shall not use any information collected in connection with the Services performed under this Agreement for any purpose other than fulfilling the service without the City's express written consent. 13.5 Data Location. Vendor shall provide its services to the City solely from data centers or devices located in the United States. Storage of Pilot Data at rest shall be located solely in data centers or on devices in the U.S. Vendor shall permit its personnel and contractors to access Pilot Data remotely only as required to provide technical support or other support specifically requested by the City. 13.6 Security Incident or Data Breach Notification. Vendor shall inform the City immediately of any security incident or data breach, cooperate with the City in addressing the matter, promptly implement measures to cure the breach, and implement breach notification and reconciliation protocols in accordance with NIST -approved methods as directed by the City. REV: 09-13-19 DZ ATTY/AGR.2019.245/Equipped Systems Inc. (Page 5 of 12)