Common use of County Data Clause in Contracts

County Data. 2.6.1. Contractor shall maintain controls that ensure logical separation of County Data from non-County data. Contractor agrees to provide at a minimum Advanced Encryption Standard 256-bit encryption (“AES-256”) or current industry security standards (or whichever is higher) for all County Data that includes any social security numbers, bank account numbers, username with passwords or security questions, cardholder data, or any other protected data such as Protected Health Information (“PHI”) and Personally Identifiable Information (“PII”), and any other data as may be directed by County, and on all copies of such data stored, transmitted, or processed, at no additional charge to County, and shall classify such data internally at its highest confidentiality level. Contractor shall also ensure that the encryption key(s) are not stored with the encrypted data and are secured by a Hardware Security Module (“HSM”). Contractor shall immediately notify County of any compromise of any encryption key. Contractor shall provide a copy of County’s encryption key(s) at County’s request. Contractor shall prohibit the use of unencrypted protocols such as FTP and Telnet for the data identified in this paragraph.

County Data. 2.6.12.7.1. Contractor shall maintain controls that ensure logical separation of County Data from non-County dataData. Contractor agrees to provide at a minimum Advanced Encryption Standard 256-bit encryption keys (“AES-256”) or current industry security standards (or whichever is higher) for all County Data that includes any social security numbers, taxpayer identification numbers, employer identification numbers, bank account numbers, username with passwords or security questionspasswords, cardholder data, or and any other protected data such as Protected Health Information (“PHI”) and Personally Identifiable Information (“PII”), and any other data ) or as may be otherwise directed by County, and County on all copies of such data stored, transmitted, or processed, at no additional charge to County, and shall classify such data internally at its highest confidentiality level. Contractor shall also ensure that the encryption key(s) are not stored with the encrypted data and are secured by a Hardware Security Module (“HSM”). Contractor shall immediately notify County of any compromise of any the encryption keykeys. Contractor shall provide a copy of County’s encryption key(s) at County’s request. Contractor shall prohibit the use of unencrypted protocols such as FTP and Telnet for the data identified defined in this paragraph.