Laserfiche WebLink
1075 for all Tax Information,(ii)the most recently updated PCI Data Security Standard from <br /> the PCI Security Standards Council for all PCI, (iii) the most recently issued version of the <br /> U.S. Department of Justice, Federal Bureau of Investigation, Crimi al Justice Information <br /> Services Security Policy for all CJI, and (iv) the federal Health Inurance Portability and <br /> Accountability Act for all PHI and the HIPAA Business Associate Addendum attached to <br /> this Contract. Borrower shall immediately forward any request or demand for State Records <br /> to the State's principal representative. <br /> B. Other Entity Access and Nondisclosure Agreements <br /> Borrower may provide State Records to its agents,employees,assigns and Subcontractors as <br /> necessary to perform the Work, but shall restrict access to State Confidential Information to <br /> those agents, employees, assigns and Subcontractors who require ccess to perform their <br /> obligations under this Contract. Borrower shall ensure all such age ts, employees, assigns, <br /> and Subcontractors sign agreements containing nondisclosure provisi ns at least as protective <br /> as those in this Contract, and that the nondisclosure provisions are n force at all times the <br /> agent, employee, assign or Subcontractor has access to any State C nfidential Information. <br /> Borrower shall provide copies of those signed nondisclosure provi ions to the State upon <br /> execution of the nondisclosure provisions. <br /> C. Use, Security, and Retention <br /> Borrower shall use,hold and maintain State Confidential Information in compliance with any <br /> and all applicable laws and regulations in facilities located within the United States,and shall <br /> maintain a secure environment that ensures confidentiality of all State Confidential <br /> Information wherever located. Borrower shall provide the State with access, subject to <br /> Borrower's reasonable security requirements, for purposes of inspecting and monitoring <br /> access and use of State Confidential Information and evaluating security control <br /> effectiveness.Upon the expiration or termination of this Contract,Borrower shall return State <br /> Records provided to Borrower or destroy such State Records and certify to the State that it <br /> has done so, as directed by the State. If Borrower is prevented by law or regulation from <br /> returning or destroying State Confidential Information, Borrower warrants it will guarantee <br /> the confidentiality of, and cease to use, such State Confidential Information. <br /> D. Incident Notice and Remediation <br /> If Borrower becomes aware of any Incident, it shall notify the tate immediately and <br /> cooperate with the State regarding recovery, remediation, and the cessity to involve law <br /> enforcement, as determined by the State. Unless Borrower can establish that none of <br /> Borrower or any of its agents, employees, assigns or Subcontractors are the cause or source <br /> of the Incident,Borrower shall be responsible for the cost of notifying each person who may <br /> have been impacted by the Incident. After an Incident, Borrower shall take steps to reduce <br /> the risk of incurring a similar type of Incident in the future as directed by the State, which <br /> may include, but is not limited to, developing and implementing a remediation plan that is <br /> approved by the State at no additional cost to the State. <br /> E. Data Protection and Handling <br /> Borrower shall ensure that all State Records and Work Product in the possession of <br /> Borrower or any Subcontractors are protected and handled in accord ce with the <br /> requirements of this Contract, including the requirements of any E bits hereto, at all <br /> times. <br /> Contract Number:CT2019-3463 Page 11 of 20 Version 0119 <br />