Common use of Use, Security, and Retention Clause in Contracts

Use, Security, and Retention. Confidential information of any kind shall not be distributed or sold to any third party or used by Contractor or its agents in any way except as authorized by this Agreement or approved in writing by the Commonwealth. Contractor shall provide and maintain a secure environment that ensures confidentiality of all OVR records and other confidential information wherever located. Contractor shall comply with KRS 61.931-934 and is required thereunder to implement, maintain, and update security and breach investigation procedures appropriate to the nature of the information disclosed, that are at least as stringent as the security and breach investigation procedures and practices referenced in KRS 61.932(1)(b), and that are reasonably designed to protect the personal information from unauthorized access, use, modification, disclosure, manipulation, or destruction. In the event Contractor suffers a security breach relating to the personal information in its possession, Contractor shall notify OVR pursuant to KRS 61.932(2)(b), and Contractor shall be responsible for the costs of the notification and investigation required under KRS 61.933.

Use, Security, and Retention. Confidential information of any kind shall not be distributed or sold to any third party or used by Contractor or its agents in any way except as authorized by this Agreement or approved in writing by the Commonwealth. Contractor shall provide and maintain a secure environment that ensures confidentiality of all OVR records and other confidential information wherever located. Contractor shall comply with KRS 61.931-934 and is required thereunder to implement, maintain, and update security and breach investigation procedures appropriate to the nature of the information disclosed, that are at least as stringent as the security and breach investigation procedures and practices referenced in KRS 61.932(1)(b), and that are reasonably designed to protect the personal information from unauthorized access, use, modification, disclosure, manipulation, or destruction. In the event Contractor suffers a suspected data incident or suspected data security breach relating to the personal information in its possession, Contractor shall notify OVR pursuant to KRS 61.932(2)(b), and Contractor shall be responsible for the costs of the notification and investigation required under KRS 61.933.