Common use of DATA SECURITY AND PROTECTION Clause in Contracts

DATA SECURITY AND PROTECTION. The Contractor will hold County Information, as defined below, in the strictest confidence and will comply with all applicable County security and network resources policies, as well as all local, state and federal laws and regulatory requirements concerning data privacy and security. The Contractor must develop, implement, maintain, continually monitor and use appropriate administrative, technical and physical security measures to control access to and to preserve the confidentiality, privacy, integrity and availability of all electronically maintained or transmitted information received from or created or maintained on behalf of the County. For purposes of this provision, and as more fully described in this Contract and in the County’s Non-Disclosure and Data Security Agreement (NDA), “County Information” includes, but is not limited to, electronic information; documents; data; images; financial records; personally identifiable information; personal health information (PHI); personnel, educational, voting, registration, tax and assessment records; information related to public safety; County networked resources; and County databases, software and security measures that are created, maintained, transmitted or accessed to perform the Work under this Contract.