SECURITY AND CONFIDENTIALITY OF INFORMATION Sample Clauses
The 'Security and Confidentiality of Information' clause establishes the obligation of parties to protect sensitive data and prevent unauthorized disclosure or access. It typically requires that any confidential information shared during the course of the agreement be handled with strict safeguards, such as limiting access to authorized personnel and implementing appropriate security measures. This clause is essential for maintaining trust between parties and mitigating the risk of data breaches or misuse of proprietary information.
POPULAR SAMPLE Copied 3 times
SECURITY AND CONFIDENTIALITY OF INFORMATION. Information received as part of this contract shall be considered Confidential Information. The CONSULTANT warrants that it will take the appropriate steps as to its personnel, agents, officers and any SUBCONTRACTOR/SUBCONSULTANTS regarding the obligations arising under this clause to insure such confidentiality. The CONSULTANT shall have written policies and/or business procedures in place which will protect Confidential Information from unauthorized disclosure, use, access, loss, alteration or destruction. The CONSULTANT may disclose to other parties, as authorized by the NYSDOT Project Manager, or as described in the scope of services, only the information necessary to perform services under this contract. However, the CONSULTANT shall in no circumstance, communicate with the public or news media without prior authorization from the States designee. Neither shall the CONSULTANT disclose information deemed confidential by the State nor shall the CONSULTANT disclose any other information obtained or developed in the performance of services under this agreement without the written authorization of the State. This warranty shall survive termination of this Contract. CONSULTANT shall comply with the provisions of the New York State Information Security Breach and Notification Act, including General Business Law Section §889-aa and State Technology Law §208 as enacted by such Act or subsequently amended. In the event of an information security breach resulting in the unauthorized disclosure of personal information, CONSULTANT shall be liable for the costs associated with such breach if caused by CONSULTANT’s negligent or willful acts or omissions, or the negligent or willful acts or omissions of the CONSULTANT’s agents, officers, employees or SUBCONSULTANTS.
SECURITY AND CONFIDENTIALITY OF INFORMATION. 5.1 The Data Processor shall ensure that it has taken appropriate technical and organizational measures to protect the processed Personal Data and complies with all data security policies and instructions specified by the Data Controller. The measures must ensure an adequate level of security, taking into account:
5.1.1. existing technical capabilities;
5.1.2. special risks related to the processing of Personal Data;
5.1.3. processing of special categories of Personal Data;
5.1.4. the cost of measures.
5.2 The data processor must ensure a sufficient level of security of personal data. The Data Processor protects Personal Data from destruction, alteration, unauthorized disclosure or unauthorized access. Personal data is also protected from all other unlawful methods of Processing Personal Data. Taking into account the level of technical feasibility, the nature, scope, context and purposes of the processing of Personal Data, the costs of implementing security measures, as well as the risks of varying probability and seriousness posed by the Processing of Personal Data to the rights and freedoms of natural persons, the Processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including, inter alia, if necessary:
5.2.1. pseudonymisation of personal data and its encryption;
5.2.2. the ability to ensure the continuous confidentiality, integrity, accessibility and resilience of personal data processing systems and services;
5.2.3. the ability to restore conditions and access to Personal Data in a timely manner in the event of a physical or technical incident;
5.2.4. a regular process for the verification, evaluation and evaluation of the effectiveness of technical and organisational measures to ensure the security of the processing of Personal Data.
5.3 Implementing technical and organisational measures as specified in 5.2. The Data Processor shall apply the following or other technical and organizational security measures ensuring an adequate level of data security:
5.3.1. physical access protection. Unattended premises of the Data Processor, with computer equipment and personal information, must be kept locked in order to protect Personal Data from unauthorized use, exposure or theft;
5.3.2. a data recovery process to retrieve Personal Data recovered from backups;
5.3.3. authorisation control, according to which access to Personal Data is possible through the technical permit control syste...
SECURITY AND CONFIDENTIALITY OF INFORMATION. The Parties undertake to strictly adhere to the relevant requirements for security and confidentiality of information supplied or exchanged under this Agreement by ensuring that, information that is of a restricted or confidential nature, or is obtained from a source that is classified as restricted or confidential, shall not be divulged to another party, or out into another use, other than for the purpose for which it has been obtained.
SECURITY AND CONFIDENTIALITY OF INFORMATION. Information received as part of this contract shall be considered “Confidential Information.” The CONSULTANT warrants that it will take the appropriate steps as to its personnel, agents, officers and any SUBCONTRACTORS/SUBCONSULTANTS regarding the obligations arising under this clause to insure such confidentiality. The CONSULTANT shall have written policies and/or business procedures in place which will protect Confidential Information from unauthorized disclosure, use, access, loss, alteration or destruction. The CONSULTANT may disclose to other parties, as authorized by the NYSDOT Project Manager, or as described in the scope of services, only the information necessary to perform services under this contract. However, the CONSULTANT shall in no circumstance communicate with the public or news media without prior authorization from the State’s designee. Neither shall the CONSULTANT disclose information deemed confidential by the State nor shall the CONSULTANT disclose any other information obtained or developed in the performance of services under this Agreement without the written authorization of the State. This warranty shall survive termination of this Contract.
SECURITY AND CONFIDENTIALITY OF INFORMATION. 7.1. The Data Processor shall ensure adequate protection of personal data in accordance with this Agreement for the purpose of protecting personal data against destruction, alteration, unauthorized dissemination or unauthorized access. Personal data shall also be protected against other forms of unlawful processing.
7.2. The Data Processor shall draw up and keep up-to-date a description of its technical, organizational and physical measures to comply with the applicable legislation on the protection of personal data.
7.3. Without the prior written consent of the Data Controller, the Data Processor shall undertake not to disclose personal data processed under this Agreement or not to allow other access to them to any third party, except for auxiliary data processors which are invoked under this Agreement.
7.4. The Data Processor shall ensure that all persons involved in the processing of personal data have a permanent obligation of confidentiality by means of a confidentiality contract or that they are subject to an appropriate legal obligation of confidentiality.
7.5. If, for any reason, either Party is unable to comply with the terms of this Agreement, it shall immediately inform the other Party.
SECURITY AND CONFIDENTIALITY OF INFORMATION. Describe Respondent’s ability to ensure its employees protect confidential information.