06-30-25-SWS - Laserfiche WebLink

Home Browse Search

Docusign Envelope ID: 1BD62A30-BDC3-4600-B45A-9435E6916BEA Customer data shall be limited to those persons with a need to know for the provision of services by Flock. Except where client services or construction are provided, at the end of the Project all Customer data will be purged from Flock computers and storage devices used for the Agreement and Flock shall give the Customer written verification that the data has been purged. 11.19 Security. Flock is required to comply with all applicable Ramsey County Information Services Security Policies ("Policies"), as published and updated by Information Services Information Security. The Policies can be made available on request. Flock shall report to Customer any privacy or security incident regarding the information of which it becomes aware. "Security Incident" means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of information or interference with System operations in an information system. "Privacy incident" means violation of the Minnesota Government Data Practices Act (MGDPA) and/or the HIPAA Privacy Rule (45 C.F.R. Part 164, Subpart E), including, but not limited to, improper and/or unauthorized use or disclosure of protected information, and incidents in which the confidentiality of the information maintained by it has been breached. This report must be in writing and sent to the Customer not more than 7 days after learning of such non -permitted use or disclosure. Such a report will at least: (1) Identify the nature of the non -permitted use or disclosure; (2) Identify the data used or disclosed; (3) Identify who made the non -permitted use or disclosure and who received the non -permitted or violating disclosure; (4) Identify what corrective action was taken or will be taken to prevent further non - permitted uses or disclosures; (5) Identify what was done or will be done to mitigate any deleterious effect of the non -permitted use or disclosure; and (6) Provide such other information, including any written documentation, as the Customer may reasonably request. Flock is responsible for notifying all affected individuals whose sensitive data may have been compromised as a result of the Security or Privacy incident. Flock must ensure that any agents (including contractors and subcontractors), analysts, and others to whom it provides protected information, agree in writing to be bound by the same restrictions and conditions that apply to it with respect to such information. Customer retains the right to inspect and review Flock's operations for potential risks to Customer operations or data. The review may include a review of the physical site, technical vulnerabilities testing, and an inspection of documentation such as security test results, IT audits, and disaster recovery plans. All Customer data and intellectual property stored in Flock's system is the exclusive property of the Customer.