2024-06-10_PERMIT FILE - M2024027

Home Browse Search

LJUI.UOIYI I CI IVCIUpe IU.J/Of LI-WA-04r.7-4D0 I-MDOJ-4 114OJOODC4U PO#:461002243 Routing#: 24-HA4-ZG-00107 performance in a manner that does not unduly interfere with Contractor's performance of the Work. D. Final Audit Report Contractor shall promptly submit to the State a copy of any final audit report of an audit performed on Contractor's records that relates to or affects this Contract or the Work,whether the audit is conducted by Contractor or a third party. 10. CONFIDENTIAL INFORMATION-STATE RECORDS A. Confidentiality Contractor shall keep confidential, and cause all Subcontractors to keep confidential, all State Records,unless those State Records are publicly available. Contractor shall not,without prior written approval of the State, use,publish, copy, disclose to any third party, or permit the use by any third party of any State Records, except as otherwise stated in this Contract,permitted by law or approved in writing by the State. Contractor shall provide for the security of all State Confidential Information in accordance with all policies promulgated by the Colorado Office of Information Security and all applicable laws, rules, policies, publications, and guidelines. If Contractor or any of its Subcontractors will or may receive the following types of data, Contractor or its Subcontractors shall provide for the security of such data according to the following: (i) the most recently promulgated IRS Publication 1075 for all Tax Information and in accordance with the Safeguarding Requirements for Federal Tax Information attached to this Contract as an Exhibit, if applicable, (ii) the most recently updated PCI Data Security Standard from the PCI Security Standards Council for all PCI, (iii) the most recently issued version of the U.S. Department of Justice, Federal Bureau of Investigation, Criminal Justice Information Services Security Policy for all CJI, and (iv) the federal Health Insurance Portability and Accountability Act for all PHI and the HIPAA Business Associate Agreement attached to this Contract, if applicable. Contractor shall immediately forward any request or demand for State Records to the State's principal representative. B. Other Entity Access and Nondisclosure Agreements Contractor may provide State Records to its agents, employees, assigns and Subcontractors as necessary to perform the Work, but shall restrict access to State Confidential Information to those agents, employees, assigns and Subcontractors who require access to perform their obligations under this Contract. Contractor shall ensure all such agents, employees, assigns, and Subcontractors sign nondisclosure provisions at least as protective as those in this Contract, and that the nondisclosure provisions are in force at all times the agent, employee, assign or Subcontractor has access to any State Confidential Information. Contractor shall provide copies of those signed nondisclosure provisions to the State upon execution of the nondisclosure provisions if requested by the State. C. Use, Security, and Retention Contractor shall use, hold and maintain State Confidential Information in compliance with any and all applicable laws and regulations in facilities located within the United States, and shall maintain a secure environment that ensures confidentiality of all State Confidential Information wherever located. Contractor shall provide the State with access, subject to Contractor's reasonable security requirements, for purposes of inspecting and monitoring access and use of State Confidential Information and evaluating security control effectiveness. Upon the expiration or termination of this Contract, Contractor shall return Page 10 of 63