Common use of Storage Location Clause in Contracts

Storage Location. The parties have considered the benefits and risks of duplication of Data for the purposes of this DSA. [Select one of the following options.] ☐
Data subject to this DSA will be maintained in a virtual environment made available by the Management Performance Hub for that purpose. ☐
Data subject to this DSA will be maintained on information technology infrastructure owned or licensed by the Organization. (Attach as an exhibit a completed StateRAMP Security Snapshot (▇▇▇▇▇://▇▇▇▇▇▇▇▇▇.▇▇▇/providers/snapshot/) or OCDO Third-Party Risk Questionnaire.) ☐
Other. [Include a written statement to describe and support the selection made above.] Data Protection. Data subject to this DSA will be maintained in accordance with applicable law and this DSA. The Organization agrees to process the Data for no purpose other than that provided herein. Data subject to this DSA will be protected by appropriate administrative, physical, and technical security measures to safeguard against unauthorized access, disclosure, or theft. Data subject to this DSA will be maintained at rest solely in data centers in the continental United States of America, shall not be maintained on portable devices, including personal laptop and desktop computers, and shall not be accessed remotely unless and until written approval is received from the Agency contact identified in Sec 1 of this DSA and the OCDO by email to ▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇.▇▇.▇▇▇. The Organization will not share or redisclose any portion of the Data unless and until it has received written approval to do so from the Agency contact identified in Sec. 1 of this DSA and the OCDO by email to ▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇.▇▇.▇▇▇. This DSA does not prevent the Organization from disclosing aggregate representations of the Data so long as the Agency and the OCDO are satisfied that the following conditions are met: the disclosure does not violate any applicable State or Federal law or rule; the disclosure is sufficiently suppressed so as to comply with applicable State or Federal law, rule, and OCDO Guidance Document: Data Suppression and Obfuscation; the disclosure is noncommercial in nature (this includes disclosure in connection with the preparation or publication of news, for nonprofit activities, or for academic research); the disclosure is intended and ultimately used in accordance with the terms of this DSA; the Organization shall conspicuously credit the “State of Indiana” in any publication, disclosure, or other representation; and written advance notice of such disclosure has been provided to the Agency contact identified in Sec. 1 of this DSA and the OCDO by email to ▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇.▇▇.▇▇▇. Data subject to this DSA: ☐
may ☐
may not be accessed by a third-party under contract with the Organization. (If yes, attach as an exhibit a copy of the fully executed contract with the third party.) If Data subject to this DSA will be maintained on information technology infrastructure owned or licensed by the Organization, the following terms and conditions apply: Data subject to this DSA will be transmitted through a managed file transfer platform approved by the Indiana Office of Technology for that purpose, using secured encryption technologies that meet or exceed the standards under Federal Information Processing Standards (FIPS) 140-2, Level 1, for data in motion.