Agmt26 Ensight Technologies, LLC - PARCS System

Browse Search

REV: 01-05-26 LR unauthorized access or use of City Data or City Solution Data at any time. To this end, Consultant shall safeguard the confidentiality, integrity and availability of City Data and City Solution Data and comply with the following conditions: 13.4.1 Consultant shall implement and maintain appropriate administrative, technical and organizational security measures to safeguard against unauthorized access, disclosure or theft of City Data and City Solution Data. Such security measures shall comply with the following standards: ISO 27701, ISO 27017 and ISO 27018. 13.4.2 All data obtained by Consultant in the performance of this Agreement shall become and remain property of the City. 13.4.3 At no time shall any City Data or processes - that either belong to or are intended for the use of the City or its officers, agents or employees - be copied, disclosed, sold, or retained by Consultant or any party related to Consultant for subsequent use in any transaction that does not include the City without the City's express written consent. 13.4.4 Consultant shall not use City Data for any purpose other than fulfilling the Services without the City’s express written consent. 13.5 Data Location. Consultant shall provide Services to City solely from data centers in the United States. Storage of City Data and Solution Data at rest shall be located solely in data centers in the United States. Consultant shall permit its personnel and subcontractors to access City Data remotely only as required to provide the Services or offer technical support or other support specifically requested by the City. Consultant shall not allow its personnel or contractors to store City Data on portable devices, including personal computers, except for devices that are used and kept only at its U.S. data centers. 13.6 Security Incident or Data Breach Notification. Consultant shall inform the City within 24 hours or sooner, unless shorter time is required by applicable law, of any Security Incident or Data Breach, cooperate with the City in addressing the matter, promptly implement measures to cure the breach, and implement breach notification and reconciliation protocols in accordance with NIST-approved methods. 13.6.1 Incident Response. Consultant may need to communicate with outside parties regarding a Security Incident, which may include contacting law enforcement, fielding media inquiries, and seeking external expertise as mutually agreed upon, defined by law, or contained in this Agreement. Discussing Security Incidents with the City should be handled on an urgent as-needed basis, as part of communication and mitigation processes as mutually agreed upon, defined by law, or contained in this Agreement. ATTY/AGR.2026.001/EnSight Technologies (Parking Access and Revenue Control System (PARCS)) (Page 11 of 167)