Laserfiche WebLink
DOR Contract No. K2052 <br /> XI. Breach of Confidentiality <br /> In the event of any use, access, or disclosure of confidential data by the City, its employees, or <br /> its agents in material violation of the terms of this Agreement: <br /> A. The City shall notify the Department in writing as soon as practicable, but no later <br /> than three (3) working days, after determining that a suspected violation has <br /> occurred. <br /> B. The City shall cooperate with and provide information requested by the Department <br /> concerning the circumstances of the breach. <br /> C. The City is responsible and liable for costs of notification and any other associated <br /> costs and liability arising out of any breach of confidentiality in violation of this <br /> Agreement. <br /> D. The Department may immediately terminate this Agreement and require the certified <br /> return or destruction of all records containing confidential data received under the <br /> Agreement. <br /> XII. Data Breach Notification <br /> If City employees or its agents detect a compromise or potential compromise in the data <br /> security for Department data such that the data may have been accessed or disclosed without <br /> proper authorization, the City shall give notice to the Department within one (1) business day of <br /> discovering the compromise or potential compromise. The City or its agents shall take <br /> corrective action as soon as practicable to eliminate the cause of and mitigate the effects of the <br /> breach and shall be responsible for ensuring that appropriate notice is made to those <br /> individuals whose personal information may have been improperly accessed or disclosed. At a <br /> minimum, notification to the Department will include: <br /> A. The date and time of the event; <br /> B. A description of the Department data involved in the event; and <br /> C. Corrective actions the City is taking to prevent further compromise of data. <br /> XIII. Data Security <br /> Confidential data provided by the Department shall be stored in a secure physical location and <br /> on the City owned devices with access limited to the least number of staff needed to complete <br /> the purpose of this Agreement. <br /> A. The City agrees to store data only on one or more of the following media and protect <br /> the data as described: <br /> 1) Workstation hard disk drives <br /> a) Access to the data stored on local workstation hard disks will be restricted to <br /> authorized users by requiring logon to the local workstation using a unique user <br /> ID and complex password, passphrase, or other authentication mechanism which <br /> provide equal or greater security, such as biometrics or smart cards. <br /> CITY DATA SHARING AGREEMENT Page 6 <br />