Contract Addendum for Security and Permissible Use:
ARTICLE IX – SECURITY AND PERMISSIBLE USE PROVISIONS
14.1 Security Provisions: CITY agrees to follow all defined security requirements including but not limited to:
A) All CITY employees who are provided access to services provided by CONTRACTOR must complete a background check and must complete annual security awareness trainings.
B) All CITY employees must sign security agreement documents subject to the source state or government agency where the vehicle registered owner information is being obtained.
C) CITY must inform CONTRACTOR within 24 hours of a CITY employee with access to CONTRACTOR services leaving their role.
D) CITY must inform CONTRACTOR of any breach of information within 24 hours, so the appropriate government agencies can be notified of the breach.
E) CITY understands and agrees that security requirements may change and be updated to reflect the most current security requirements of the government agencies CONTRACTOR works with to obtain registered vehicle information.
F) CITY understands that evidence of the security requirements may be requested to comply with CONTRACTOR audit requirements of the governmental agencies CONTRACTOR works with.
G) CITY understands and agrees that access to confidential registered owner information may be immediately restricted or terminated if any of the mandatory provisions above are found to be violated or abused. The subrecipient’s (CITY) access to data is based on the recipient’s (CONTRACTOR) access, and any suspension of access prohibits use of the data by both parties.
14.2 Permissible Use Provisions: CITY agrees to follow all defined permissible use requirements including but not limited to:
A) All CITY employees who are provided access to services provided by CONTRACTOR must receive annual training on permissible use of state agency information.
B) All CITY employees must sign permissible use agreement documents subject to the source state or government agency where the vehicle registered owner information is being obtained.
C) All CITY employees will be instructed of the confidentiality of information obtained from a government agency and the proper use of
that information based on job responsibility, which must not involve immigration purposes.
D) CITY must inform CONTRACTOR within 24 hours if data has been misused in such a manner that might constitute data misuse or a data breach.
E) CITY must inform CONTRACTOR of any breach of information within 24 hours, so the appropriate government agencies can be notified of the breach.
F) CITY understands and agrees that permissible use requirements may change and be updated to reflect the most current permissible use requirements of the government agencies CONTRACTOR works with to obtain vehicle registered information. Data can be used for no other purpose unless otherwise required by law.
G) CITY understands that evidence of the permissible use requirements may be requested to comply with CONTRACTOR audit requirements of the governmental agencies CONTRACTOR works with.
H) CITY understands that tracking of activity will occur for annual reviews to be conducted by CONTRACTOR to ensure the confidentiality and privacy required for government agency provided information.
I) CITY understands and agrees that access to confidential registered owner information may be immediately restricted or terminated if any of the mandatory provisions above are found to be violated or abused.
J) CITY understands that all information obtained through government agencies is considered subject to the Drivers Privacy Act (DPPA) and agrees that no disclosures of information will be made that would constitute a violation of this act.
AGREEMENT TO ADDENDUM – SIGN BELOW:
Agency Name: __________________________________________ Signature:
Name of Signee:
Title:
Date: