Agmt21 Camino Technology Solutions, Inc.

Browse Search

data that is related to the Services provided by this Agreement. Consultant shall not access City user accounts or City Data, except (1) in the course of data center operations, (2) in response to service or technical issues, (3) as required by the express terms of this Agreement, or (4) at City's written request. 12.5 Data Protection. Protection of personal privacy and data shall be an integral part of the business activities of Consultant to ensure there is no inappropriate or unauthorized access or use of City Data at any time. To this end, Consultant shall safeguard the confidentiality, integrity and availability of City Data and comply with the following conditions: 12.5.1 Consultant shall implement and maintain appropriate administrative, technical and organizational security measures to safeguard against unauthorized access, disclosure or theft of City Data. Such security measures shall be in accordance with recognized industry practice. 12.5.2 All data obtained by Consultant in the performance of this Agreement shall become and remain property of the City. 12.5.3 At no time shall any City Data or processes - that either belong to or are intended for the use of the City or its officers, agents or employees - be copied, disclosed, sold, or retained by Consultant or any party related to Consultant for subsequent use in any transaction that does not include the City without the City's express written consent. 12.5.4 Consultant shall not use any information collected in connection with the Services performed under this Agreement for any purpose other than fulfilling the service without the City's express written consent. 12.6 Data Location. Consultant shall provide its services to the City solely from data centers in the United States. Storage of City data at rest shall be located solely in data centers in the U.S. Consultant shall permit its personnel and contractors to access City Data remotely only as required to provide technical support or other support specifically requested by the City. 12.7 Security Incident or Data Breach Notification. Consultant shall inform the City immediately of any security incident or data breach, cooperate with the City in addressing the matter, promptly implement measures to cure the breach, and implement breach notification and reconciliation protocols in accordance with NIST -approved methods as directed by the City. 12.7.1 Incident Response. Consultant may need to communicate with outside parties regarding a Security Incident, which may include contacting law enforcement, fielding media inquiries, and seeking external expertise as mutually agreed upon, defined by law, or contained in this REV: 03-24-21 PR Pilot Project Software Agreement for the Automated Permit and Land Management System Camino Technologies Corporation ATTY/AGR.2021.062/Camino Technolgy Solutions, Inc. (Software for Automated Permit and Land Management) (Page 8 of 18)