disclosure, release, access, timely and correctly to public records review, destruction; loss, theft or act requests. misuse of an information asset. If the Vendor experiences a loss or The Vendor will dispose of records of breach of data, the Vendor shall State data as instructed by the State immediately report the loss or during the term of this agreement. breach to the State. If the State No data shall be copied, modified, data owner determines that destroyed or deleted by the Vendor notice to the individuals whose other than for normal operation or data has been lost or breached is maintenance during the Agreement appropriate, the Vendor will bear period without prior written notice to any and all costs associated with and written approval by the State. the notice or any mitigation selected by the data owner. These costs include, but are not Remote access to data from outside limited to, staff time, material the territorial United States, including costs, postage, media remote access to data by authorized announcements, and other support staff in identified support identifiable costs associated with centers, is prohibited unless the breach or loss of data. approved in advance by the State. The Vendor immediately The physical location of Vendor’s notify and work cooperatively with data center where the Data is stored the State data owner to respond shall be within the territorial United States.
disclosure, release, access, review, destruction; loss, theft or misuse of an information asset. If the Vendor experiences a loss or breach of data, the Vendor shall immediately report the loss or breach to the State. If the State data owner determines that notice to the individuals whose data has been lost or breached is appropriate, the Vendor will bear any and all costs associated with the notice or any mitigation selected by the data owner. These costs include, but are not limited to, staff time, material costs, postage, media announcements, and other identifiable costs associated with the breach or loss of data. The Vendor immediately notify and work cooperatively with the State data owner to respond timely and correctly to public records act requests. The Vendor will dispose of records of State data as instructed by the State during the term of this agreement. No data shall be copied, modified, destroyed or deleted by the Vendor other than for normal operation or maintenance during the Agreement period without prior written notice to and written approval by the State. Remote access to data from outside the territorial United States, including remote access to data by authorized support staff in identified support centers, is prohibited unless approved in advance by the State. The physical location of Vendor’s data center where the Data is stored shall be within the territorial United States.
SIMM-45A-IVV-SOW_2017-0808-1.docx