Common use of PROTECT Clause in Contracts

PROTECT. Addressee Only’ must be entered in the subject field of the email in front of the email title in all instances. Post Hard copy Data may be transmitted by post, courier or messenger. If Data must be put on CD/DVD it should be encrypted (see details of encryption above). If the data recipient is unable to collect the CD/DVD by hand, encrypted CD/DVD’s may be transmitted by post (Recorded Delivery or better), courier or messenger. If encryption is not possible the CD/DVD will be password protected using at least 13 character alpha-numeric passwords. If the data recipient is unable to collect the CD/DVD by hand it will be dispatched by Royal Mail Special Delivery service with tracking of transit or by courier. In all cases when sending Data by post, a single sealed cover addressed to an individual by name or appointment will be used. The cover must not attract attention. Therefore, it must not be marked with any protective marking and only the descriptors ‘Personal’ or ‘Addressee Only’ may be used. In all cases Data will be sent only to a named individual, agreed in advance, and must be accessed only by Permitted Persons. Data Storage: Hard copies of Data must be stored in a secure building and/or in a locked cabinet, and destroyed in accordance with the below. When held on ICT systems on secure premises, password policies must be in place that ensure only those listed can access data. Networks must be Best Commercial. Best Commercial is defined as ‘Software from a trusted supplier' – e.g. the product has a CESG Claims Tested Xxxx. CESG is the Information Assurance (IA) arm of GCHQ. Full back-up policies must be in place for servers. All access to standalone machines must be protected by username/password. All data users must avoid transferring Data onto removable media (including laptop hard-drives, removable discs, CD’s, USB memory Sticks, PDA’s and media card formats), except when this is essential and only as agreed in writing with the Data Manager setting out the controls to be put in place. If taken outside the organisation’s secure premises, laptop hard drives, CD/DVD, USB devices or any other removable media must be fully encrypted.

PROTECT. Addressee Only’ must be entered in the subject field of the email in front of the email title in all instances. Post Hard copy Data may be transmitted by post, courier or messenger. If Data must be put on CD/DVD it should be encrypted (see details of encryption above). If the data recipient is unable to collect the CD/DVD by hand, encrypted CD/DVD’s may be transmitted by post (Recorded Delivery or better), courier or messenger. If encryption is not possible the CD/DVD will be password protected using at least 13 character alpha-numeric passwords. If the data recipient is unable to collect the CD/DVD by hand it will be dispatched by Royal Mail Special Delivery service with tracking of transit or by courier. In all cases when sending Data by post, a single sealed cover addressed to an individual by name or appointment will be used. The cover must not attract attention. Therefore, it must not be marked with any protective marking and only the descriptors ‘Personal’ or ‘Addressee Only’ may be used. In all cases Data will be sent only to a named individual, agreed in advance, and must be accessed only by Permitted Persons. Data Storage: Hard copies of Data must be stored in a secure building and/or in a locked cabinet, and destroyed in accordance with the below. When held on ICT systems on secure premises, password policies must be in place that ensure only those listed can access data. Networks must be Best Commercial. Best Commercial is defined as ‘Software from a trusted supplier' – e.g. the product has a CESG Claims Tested Xxxx. CESG is the Information Assurance (IA) arm of GCHQ. Full back-up policies must be in place for servers. All access to standalone machines must be protected by username/password. All data users must avoid transferring Data onto removable media (including laptop hard-drives, removable discs, CD’s, USB memory Sticks, PDA’s and media card formats), except when this is essential and only as agreed in writing with the Data Manager setting out the controls to be put in place. If taken outside the organisation’s secure premises, laptop hard drives, CD/DVD, USB devices or any other removable media must be fully encrypted.–

PROTECT. Addressee Only’ must be entered in the subject field of the email in front of the email title in all instances. Post Hard copy Data may be transmitted by post, courier or messenger. If Data must be put on CD/DVD it should be encrypted (see details of encryption above). If the data recipient is unable to collect the CD/DVD by hand, encrypted CD/DVD’s may be transmitted by post (Recorded Delivery or better), courier or messenger. If encryption is not possible the CD/DVD will be password protected using at least 13 character alpha-numeric passwords. If the data recipient is unable to collect the CD/DVD by hand it will be dispatched by Royal Mail Special Delivery service with tracking of transit or by courier. In all cases when sending Data by post, a single sealed cover addressed to an individual by name or appointment will be used. The cover must not attract attention. Therefore, it must not be marked with any protective marking and only the descriptors ‘Personal’ or ‘Addressee Only’ may be used. In all cases Data will be sent only to a named individual, agreed in advance, and must be accessed only by Permitted Persons. Data Storage: Hard copies of Data must be stored in a secure building and/or in a locked cabinet, and destroyed in accordance with the below. When held on ICT systems on secure premises, password policies must be in place that ensure only those listed can access data. Networks must be Best Commercial. Best Commercial is defined as ‘Software from a trusted supplier' supplier – e.g. the product has a CESG Claims Tested Xxxx. CESG is the Information Assurance (IA) arm of GCHQ. Full back-up policies must be in place for servers. All access to standalone machines must be protected by username/password. All data users must avoid transferring Data onto removable media (including laptop hard-drives, removable discs, CD’s, USB memory Sticks, PDA’s and media card formats), except when this is essential and only as agreed in writing with the Data Manager setting out the controls to be put in place. If taken outside the organisation’s secure premises, laptop hard drives, CD/DVD, USB devices or any other removable media must be fully encrypted.