Common use of Confidential and Sensitive Information Clause in Contracts

Confidential and Sensitive Information. As an employee, contract employee, consultant, vendor, intern, or volunteer of the TDCJ, you may have access to confidential or sensitive information through use of TDCJ information resources or through your associated activities with TDCJ information systems. Confidential and sensitive information includes identifying information, federal tax information, personal health information, criminal justice information, or any information that is classified as confidential or sensitive by federal or state law, by TDCJ policy, or is defined as “Personal Identifying Information” under Texas Business and Commerce Code § 521.002(a)(1) or “Sensitive Personal Information” as defined by Texas Business and Commerce Code § 521.002(a)(2). As a user of TDCJ systems, you are required to conform to applicable laws and TDCJ policies governing confidential and sensitive information. Your principal obligations in this area are outlined below. You are required to read and to abide by these obligations. I UNDERSTAND THAT: I may have access to confidential and sensitive information related to: • Customers, employees, users, contractors, and volunteers. This may include records, conversations, applications, or financial information by which the identity of a person can be determined, either directly OR indirectly. • TDCJ functions such as, information protected by the attorney-client and attorney work product privilege, financial information, employment records, contracts, federal tax information, internal reports, memos and communications. • Third parties to include vendor and customer information and contracts. I AGREE THAT: • I will, at all times, safeguard and retain the confidentiality, integrity, and availability of confidential and sensitive information. • I will only access confidential and sensitive information for business needs. • I will not in any way divulge, copy, release, sell, loan, review, alter, or destroy any confidential or sensitive information except as authorized. • I will not misuse or carelessly handle confidential and sensitive information. • I will encrypt confidential and sensitive information when appropriate, including when emailing such information outside the TDCJ and when storing such information on portable electronic devices and portable storage devices. • I will safeguard and not disclose my password or other authorization I have that allows me to access confidential and sensitive information, except as permitted by law. • I will report activities by any other individual or entity that I suspect may compromise the confidentiality, integrity, or availability of confidential and sensitive information. • My privileges hereunder are subject to periodic review, revision, and if appropriate, renewal. • I have no right or ownership interest in any confidential or sensitive information referred to in this Agreement. The TDCJ may revoke my access to confidential and sensitive information at any time and without notice. AUTHORIZED USE – I AGREE THAT: • I will use information resources only for official state-approved business. • I will not use information resources for personal reasons unless there are specific limited use exceptions permitted by the TDCJ division to which I am assigned. • I have no right to expect privacy in my use of TDCJ information resources or in the content of my communications sent or stored in TDCJ information resources. All user activity is subject to monitoring, logging, and review. • I will NOT attempt to circumvent the computer security system by using or attempting to use any transaction, software, files or resources I am not authorized to use. PERSONAL SECURITY IDENTIFICATION CODES (USER ID’S AND PASSWORDS) - I AGREE THAT: • I will receive and be required to use a personal security identification code (user ID and password) to gain access to and to utilize information resources. • My user ID and password are security measures that must be used only by me and I will not disclose my password to anyone. The only exception is in the event an information technology specialist requires the password to resolve an access problem. Once the problem has been corrected, I will immediately change my password. • I will be held personally responsible for any transactions initiated, actions taken, or for any harm, loss, or adverse consequences arising from the use of my user ID and password, including any unauthorized use by a third party if such party gains access to my user ID and password due to my misconduct or failure to abide by TDCJ policy. COPYRIGHTED MATERIAL - I AGREE THAT: • Any copyrighted material, including but not limited to commercial computer software, which may be made available, is protected by copyright laws and is NOT to be copied for any reason without permission from the copyright holder. • I will only install or use software on TDCJ computers that has been properly licensed and approved for my use in accordance with TDCJ policies and procedures. • If installing or authorizing the installation of software on TDCJ computers, I will be responsible for ensuring that such software is only used in a manner that complies with the terms of the applicable software license agreement and all applicable TDCJ policies and procedures. ACCESS TO DATA - I AGREE THAT: • Proper authorization is required for access to all data owned by the TDCJ, except data that has been authorized by the TDCJ for public access. • I will not attempt to access or alter any data that I am not authorized to access in the performance of my job duties. • I will not use TDCJ information resources to review, alter, or otherwise act to obtain access to information about myself, or any relative, friend, or business associate. • I will use appropriate measures to prevent others from obtaining access to TDCJ data, such as securing my workstation either by logging off or using a password-protected screen saver.

Confidential and Sensitive Information. As an employee, contract employee, consultant, vendor, intern, or volunteer employee of the TDCJagency, you may have access to confidential or sensitive information through use of TDCJ agency information resources or through your associated activities with TDCJ agency information systems. Confidential and sensitive information includes identifying information, federal tax information, personal health information, criminal justice information, or any information that is classified as confidential or sensitive by federal or state law, by TDCJ agency policy, or is defined as “Personal Identifying Information” under Texas Business and Commerce Code § 521.002(a)(1) or “Sensitive Personal Information” as defined by Texas Business and Commerce Code § 521.002(a)(2). As a user of TDCJ agency systems, you are required to conform to applicable laws and TDCJ agency policies governing confidential and sensitive information. Your principal obligations in this area are outlined below. You are required to read and to abide by these obligations. I UNDERSTAND THATunderstand that: In the course of my job, I may have access to confidential and sensitive information related to: • Customers, employees, users, contractors, and volunteers. This may include records, conversations, applications, or financial information by which the identity of a person can be determined, either directly OR indirectly. • TDCJ Agency functions such as, information protected by the attorney-client and attorney work product privilege, financial information, employment records, contracts, federal tax information, internal reports, memos and communications. • Third parties to include vendor and customer information and contracts. I AGREE THATagree that: • I will, at all times, safeguard and retain the confidentiality, integrity, and availability of confidential and sensitive information. • I will only access confidential and sensitive information for business needs. • I will not in any way divulge, copy, release, sell, loan, review, alter, or destroy any confidential or sensitive information except as authorized. • I will not misuse or carelessly handle confidential and sensitive information. • I will encrypt confidential and sensitive information when appropriate, including when emailing such information outside the TDCJ agency and when storing such information on portable electronic devices and portable storage devices. • I will safeguard and will not disclose my password or other authorization I have that allows me to access confidential and sensitive information, except as permitted by law. • I will report activities by any other individual or entity that I suspect may compromise the confidentiality, integrity, or availability of confidential and sensitive information. • My privileges hereunder are subject to periodic review, revision, and if appropriate, renewal. • I have no right or ownership interest in any confidential or sensitive information referred to in this Agreement. The TDCJ agency may revoke my access to confidential and sensitive information at any time and without notice. AUTHORIZED USE Authorized Use – I AGREE THATagree that: • I will use information resources only for official state-approved business. • I will not use information resources for personal reasons unless there are specific limited use exceptions permitted by the TDCJ agency division to which I am assigned. • I have no right to expect privacy in my use of TDCJ agency information resources or in the content of my communications sent or stored in TDCJ agency information resources. All user activity is subject to monitoring, logging, and review. • I will NOT attempt to circumvent the computer security system by using or attempting to use any transaction, software, files or resources I am not authorized to use. PERSONAL SECURITY IDENTIFICATION CODES Personal Security Identification Codes (USER User ID’S AND PASSWORDS’s and Passwords) - I AGREE THATagree that: • I will receive and will be required to use a personal security identification code (user ID and password) to gain access to and to utilize information resources. • My user ID and password are security measures that must be used only by me and I will not disclose my password to anyone. The only exception is in the event an information technology specialist requires the password to resolve an access problem. Once the problem has been corrected, I will immediately change my password. • I will be held personally responsible for any transactions initiated, actions taken, or for any harm, loss, or adverse consequences arising from the use of my user ID and password, including any unauthorized use by a third party if such party gains access to my user ID and password due to my misconduct or failure to abide by TDCJ agency policy. COPYRIGHTED MATERIAL Copyrighted Material - I AGREE THATagree that: • Any copyrighted material, including but not limited to commercial computer software, which may be made available, is protected by copyright laws and is NOT to be copied for any reason without permission from the copyright holder. • I will only install or use software on TDCJ agency computers that has been properly licensed and approved for my use in accordance with TDCJ agency policies and procedures. • If installing or authorizing the installation of software on TDCJ agency computers, I will be responsible for ensuring that such software is only used in a manner that complies with the terms of the applicable software license agreement and all applicable TDCJ agency policies and procedures. ACCESS TO DATA Access to Data - I AGREE THATagree that: • Proper authorization is required for access to all data owned by the TDCJagency, except data that has been authorized by the TDCJ agency for public access. • I will not attempt to access or alter any data that I am not authorized to access in the performance of my job duties. • I will not use TDCJ agency information resources to review, alter, or otherwise act to obtain access to information about myself, or any relative, friend, or business associate. • I will use appropriate measures to prevent others from obtaining access to TDCJ agency data, such as securing my workstation either by logging off or using a password-protected screen saver.. I will logoff or activate a password-protected screen saver, before leaving a workstation with access to files containing confidential or sensitive information. I will follow agency policies and procedures for the release of information, if I receive a request for the release of agency information or data. Security of Equipment - I agree that: I will not remove information resources from agency property without prior authorization and approval from the appropriate authority. I will immediately report all security incidents, including the loss or theft of any information resources or data, to agency management and to the agency information security officer. I agree that: I am required to be aware of, read, and comply with the information in the agency Information Security Policy found at xxxx://xxx.xxxx.xxxxx.xxx/TDCJ_Intranet/docs/Information_Resource_Security_Program.pdf I must comply with the policies concerning information resources set out in the agency policies and procedures manual, as well as any changes to those policies. I must comply with the information security policies, standards, and guidelines of the agency division that employs me, including any changes to those policies, standards, and guidelines. My failure to comply with this Agreement may result in loss of access privileges to agency information resources or other disciplinary action up to and including termination for employees; termination or alteration of employment relations in the case of temporaries, contractors, or consultants; or dismissal for interns and volunteers. Additionally, I could also be subject to civil liability and/or criminal charges, including “Breach of Computer Security” as defined in the Texas Penal Code § 33.02. Signature: Date:  

Confidential and Sensitive Information. As an employee, contract employee, consultant, vendor, intern, volunteer, or volunteer other individual of the TDCJ, you may have access to confidential or sensitive information through use of TDCJ information resources or through your associated activities with TDCJ information systems. Confidential and sensitive information includes identifying information, federal tax information, personal health information, criminal justice information, or any information that is classified as confidential or sensitive by federal or state law, by TDCJ policy, or is defined as “Personal Identifying Information” or “Sensitive Personal Information” under Texas Business and Commerce Code § 521.002(a)(1) or “Sensitive Personal Information” as defined by 521.002(a)(1)-(2). Under 1 Texas Business and Commerce Administrative Code § 521.002(a)(2202.1(22), an information system includes interconnected set of information resources under the same direct management control that shares common functionality. An information system normally includes hardware, software, network infrastructure, information, applications, communications and people. As a user of TDCJ systems, you are required to conform to applicable laws and TDCJ policies governing confidential and sensitive information. Your principal obligations in this area are outlined below. You are required to read and to abide by these obligations. I UNDERSTAND THAT: I may have access to confidential and sensitive information related to: • CustomersOffenders, customers, employees, users, contractors, and volunteers. This may include records, conversations, applications, or financial information by which the identity of a person can be determined, either directly OR indirectly. • TDCJ functions such as, information protected by the attorney-client and attorney work product privilege, financial information, employment records, contracts, federal tax information, internal reports, memos and communications. • Third parties to include vendor and customer information and contracts. I AGREE THAT: • I will, at all times, safeguard and retain the confidentiality, integrity, and availability of confidential and sensitive information. • I will only access confidential and sensitive information for business needs. • I will not in any way divulge, copy, release, sell, loan, review, alter, or destroy any confidential or sensitive information except as authorized. • I will not misuse or carelessly handle confidential and sensitive information. • I will encrypt confidential and sensitive information when appropriate, including when emailing such information outside the TDCJ and when storing such information on portable electronic devices and portable storage devices. • I will safeguard and not disclose my password or other authorization I have that allows me to access confidential and sensitive information, except as permitted by law. • I will report activities by any other individual or entity that I suspect may compromise the confidentiality, integrity, or availability of confidential and sensitive information. • My privileges hereunder are subject to periodic review, revision, and if appropriate, renewal. • I have no right or ownership interest in any confidential or sensitive information referred to in this Agreement. The TDCJ may revoke my access to confidential and sensitive information at any time and without notice. AUTHORIZED USE – I AGREE THAT: • I will use information resources only for official state-approved business. • I will not use information resources for personal reasons unless there are specific limited use exceptions permitted by the TDCJ division to which I am assigned. • I have no right to expect privacy in my use of TDCJ information resources or in the content of my communications sent or stored in TDCJ information resources. All user activity is subject to monitoring, logging, and review. • I will NOT attempt to circumvent the computer security system by using or attempting to use any transaction, software, files or resources I am not authorized to use. PERSONAL SECURITY IDENTIFICATION CODES (USER ID’S AND PASSWORDS) - I AGREE THAT: • I will receive and be required to use a personal security identification code (user ID and password) to gain access to and to utilize information resources. • My user ID and password are security measures that must be used only by me and I will not disclose my password to anyone. The only exception is in the event an information technology specialist requires the password to resolve an access problem. Once the problem has been corrected, I will immediately change my password. • I will be held personally responsible for any transactions initiated, actions taken, or for any harm, loss, or adverse consequences arising from the use of my user ID and password, including any unauthorized use by a third party if such party gains access to my user ID and password due to my misconduct or failure to abide by TDCJ policy. COPYRIGHTED MATERIAL - I AGREE THAT: • Any copyrighted material, including but not limited to commercial computer software, which may be made available, is protected by copyright laws and is NOT to be copied for any reason without permission from the copyright holder. • I will only install or use software on TDCJ computers that has been properly licensed and approved for my use in accordance with TDCJ policies and procedures. • If installing or authorizing the installation of software on TDCJ computers, I will be responsible for ensuring that such software is only used in a manner that complies with the terms of the applicable software license agreement and all applicable TDCJ policies and procedures. ACCESS TO DATA - I AGREE THAT: • Proper authorization is required for access to all data owned by the TDCJ, except data that has been authorized by the TDCJ for public access. • I will not attempt to access or alter any data that I am not authorized to access in the performance of my job duties. • I will not use TDCJ information resources to review, alter, or otherwise act to obtain access to information about myself, or any relative, friend, or business associate. • I will use appropriate measures to prevent others from obtaining access to TDCJ data, such as securing my workstation either by logging off or using a password-protected screen saver.

Confidential and Sensitive Information. As an employee, contract employee, consultant, vendor, intern, or volunteer a necessary part of your association with the TDCJAgency, you may have access to confidential or sensitive information through your use of TDCJ information resources Agency Information Resources or through your associated activities with TDCJ Agency information systems. Confidential The TVC Data Classification Policy define “Confidential” and sensitive “Sensitive” information includes to include personally identifying information, federal tax information, personal health information, criminal justice financial information, or any information that is classified as confidential or sensitive by federal or state law, by TDCJ Agency policy, or is defined as “Personal Identifying Information” under Texas Business and Commerce Code § §521.002(a)(1) or “Sensitive Personal Information” as defined by Texas Business and Commerce Code § §521.002(a)(2). As a user of TDCJ Agency systems, you are required to conform to applicable laws and TDCJ Agency policies governing confidential Confidential and sensitive Sensitive information. Your principal obligations in this area are outlined below. You are required to read and to abide by these obligations. I UNDERSTAND THATunderstand that: • In the course of my association with the Agency, I may have access to confidential Confidential and sensitive Sensitive information related to: • Customers, employeeso Employees, users, contractors, veterans, students and volunteers. This may include other entities (e.g., records, conversations, applications, or financial information). This may include any information by which the identity of a person can be determined, either directly OR indirectly. • TDCJ o Agency functions such as(e.g., information protected by the attorney-client and attorney work product privilege, financial information, employment records, contracts, federal tax information, internal reports, memos and communications.). • o Third parties to include (e.g., vendor and information, customer information and information, contracts). I AGREE THATagree that: • I will, at all times, will always safeguard and retain the confidentiality, integrity, integrity and availability of confidential Information Resources to include Confidential and sensitive Sensitive information. • I will only access confidential Confidential and sensitive Sensitive information for business needs. • I will not in any way divulge, copy, release, sell, loan, review, alter, or destroy any confidential Confidential or sensitive Sensitive information except as authorized. • I will not misuse or carelessly handle confidential Confidential and sensitive Sensitive information. • I will encrypt confidential when transferring and sensitive information when appropriatestoring Confidential information, including when emailing such information outside the TDCJ and or when storing such information on portable electronic devices and portable storage devices. • I will safeguard and will not disclose my password or other authorization I have that allows me to access confidential and sensitive informationInformation Resources, except as permitted by law. • I will report activities by any other individual or entity that I suspect may compromise the confidentiality, integrity, integrity or availability of confidential and sensitive informationInformation Resources. • My privileges hereunder are subject to periodic review, revision, and if appropriate, renewal. • I have no right or ownership interest in any confidential Information Resources to include Confidential or sensitive Sensitive information referred to in this Agreement. The TDCJ Agency may revoke my access to confidential and sensitive information Information Resources at any time and without notice. AUTHORIZED USE Authorized Use – I AGREE THATagree that: • I will use information resources Information Resources only for official state-approved business. • I will not use information resources Information Resources for personal reasons unless there are specific limited use exceptions permitted by the TDCJ division TVC policy. • I may be financially responsible for costs incurred because of my use of Information Resources beyond authorized Agency use to which I am assignedinclude data overage charges or equipment replacement. • I have no right to expect privacy in my use of TDCJ information resources Agency Information Resources or in the content of my communications sent or stored in TDCJ information resourcesAgency Information Resources. All user activity is subject to monitoring, logging, and review. • I will NOT attempt to circumvent the computer security system by using or attempting to use any transaction, software, files or resources I am not authorized to use. PERSONAL SECURITY IDENTIFICATION CODES Personal Security Identification Codes (USER User ID’S AND PASSWORDS’s and Passwords) - I AGREE THATagree that: • I will receive and will be required to use a personal security identification code (user User ID and passwordPassword) to gain access to and to utilize information resourcesuse Information Resources. • My user ID and password are security measures that must be used only by me and I will not disclose my password to anyone. The only exception is in the event an information technology specialist requires the password to resolve an access problem. Once the problem has been corrected, I will immediately change my password. • I will be held personally responsible for any transactions initiated, actions taken, or for any harm, loss, or adverse consequences arising from the use of my user ID and password, including any unauthorized use by a third party if such party gains access to my user ID and password due to my misconduct or failure to abide by TDCJ Agency policy. COPYRIGHTED MATERIAL Software - I AGREE THATagree that: • Any copyrighted material, including but not limited to commercial computer software, which may be made available, is protected by copyright laws and is NOT to be copied for any reason without permission from the copyright holder. • I will only install or use software on TDCJ Agency computers that has been properly licensed and approved for my use in accordance with TDCJ Agency policies and procedures. • If installing or authorizing the installation of software on TDCJ Agency computers, I will be responsible for ensuring that such software is only used in a manner that complies with the terms of the applicable software license agreement and all applicable TDCJ Agency policies and procedures. ACCESS TO DATA Access to Data - I AGREE THATagree that: • Proper authorization is required for access to all data owned by the TDCJAgency, except data that has been authorized by the TDCJ Agency for public access. • I will not attempt to access or alter any data that I am not authorized to access in the performance of my job duties. • I will not use TDCJ information resources use, for my own benefit, Agency Information Resources to review, alter, or otherwise act to obtain access to information about myself, or any relative, friend, or business associate. • I will use appropriate measures to prevent others from obtaining access to TDCJ Agency data, such as securing my workstation either by logging off or using a password-protected screen saver.saver and by complying with the security control requirements of the TVC Data Classification Policy. • If I receive a request for the release of Agency information or data, I will follow Agency’s policies and procedures to include notifying the General Counsel of the request. Security of Equipment - I agree that: • I will not remove Information Resources from Agency property without proper prior authorization and approval of staff with appropriate authority. • I will maintain physical security of Information Resources under my care at all times. • I will immediately report all security incidents, including the loss or theft of any Information Resources or data, to Agency management and to the Agency Information Security Officer. Non-Disclosure and Confidentiality – I agree that: • I will hold and maintain Confidential and Sensitive information in the strictest confidence for the sole and exclusive benefit of the Agency. • I will not, without prior written approval of the Agency, use for my own benefit, publish, copy or otherwise disclose to others, or permit the use by others for their benefit or to the detriment of the Agency any Confidential or Sensitive information. • I will immediately return to the Agency all Confidential and Sensitive information in whatever form or media if the Agency requests it. • The Non-Disclosure and Confidentiality provisions of this Agreement excludes information that is:

Confidential and Sensitive Information. As an employee, contract employee, consultant, vendor, intern, or volunteer employee of the TDCJSPC, you may have access to confidential or sensitive information through use of TDCJ information resources SPC Information Resources or through your associated activities with TDCJ SPC information systems. Confidential and sensitive information includes identifying information, federal tax information, personal health information, criminal justice information, or any information that is classified as confidential or sensitive by federal or state law, by TDCJ agency policy, or is defined as “Personal Identifying Information” under Texas Business and Commerce Code § §521.002(a)(1) or “Sensitive Personal Information” as defined by Texas Business and Commerce Code § §521.002(a)(2). As a user of TDCJ SPC systems, you are required to conform to applicable laws and TDCJ SPC policies governing confidential and sensitive information. Your principal obligations in this area are outlined below. You are required to read and to abide by these obligations. I UNDERSTAND THAT: In the course of my job, I may have access to confidential and sensitive information related to: • CustomersStudents, employees, users, contractors, and volunteers. This may include volunteers (e.g., records, conversations, applications, or financial information). This may include any information by which the identity of a person can be determined, either directly OR indirectly. • TDCJ SPC functions such as(e.g., information protected by the attorney-client and attorney work product privilege, student information, financial information, employment records, contracts, federal tax information, internal reports, memos and communications.). • Third parties to include (e.g., vendor and information, customer information and information, contracts). I AGREE THAT: • I will, at all times, safeguard and retain the confidentiality, integrity, integrity and availability of confidential and sensitive information. • I will participate in SPC Security Awareness Training and pass the associate examination within 30 days of initially being granted access to SPC information technology resources, and annually there after. I will only access confidential and sensitive information for business needs. • I will not in any way divulge, copy, release, sell, loan, review, alter, or destroy any confidential or sensitive information except as authorized. • I will not misuse or carelessly handle confidential and sensitive information. • I will encrypt confidential and sensitive information when appropriate, including when emailing such information outside the TDCJ agency and when storing such information on any portable electronic devices and device; including but not limited to laptops, phones, tablets or portable storage devices. • I will safeguard and will not disclose my password or other authorization I have that allows me to access confidential and sensitive information, except as permitted by law. • I will report activities by any other individual or entity that I suspect may compromise the confidentiality, integrity, integrity or availability of confidential and sensitive information. • My privileges hereunder are subject to periodic review, revision, and if appropriate, renewal. • I have no right or ownership interest in any confidential or sensitive information referred to in this Agreement. The TDCJ SPC may revoke my access to confidential and sensitive information at any time and without notice. AUTHORIZED USE – I AGREE THAT: • I will use information resources Information Resources only for official stateSPC-approved business. • I will not use information resources Information Resources for personal reasons unless there are specific limited use exceptions permitted by the TDCJ division to which I am assignedSPC. • I have no right to expect privacy in my use of TDCJ information resources agency Information Resources or in the content of my communications sent or stored in TDCJ information resourcesSPC Information Resources. All user activity is subject to monitoring, logging, and review. • I will NOT attempt to circumvent the computer security system by using or attempting to use any transaction, software, files or resources I am not authorized to use. PERSONAL SECURITY IDENTIFICATION CODES (USER ID’S AND PASSWORDS) - I AGREE THAT: • I will receive and will be required to use a personal security identification code (user User ID and passwordPassword) to gain access to and to utilize information resourcesuse Information Resources. • My user ID and password are security measures that must be used only by me and I will not disclose my password to anyone. The only exception is in the event an information technology specialist requires the password to resolve an access problem. Once the problem has been corrected, I will immediately change my password. • I will be held personally responsible for any transactions initiated, actions taken, or for any harm, loss, or adverse consequences arising from the use of my user ID and password, including any unauthorized use by a third party if such party gains access to my user ID and password due to my misconduct or failure to abide by TDCJ agency policy. COPYRIGHTED MATERIAL - I AGREE THAT: • Any copyrighted material, including but not limited to commercial computer software, which may be made available, is protected by copyright laws and is NOT to be copied for any reason without permission from the copyright holder. • I will only install or use software on TDCJ computers that has been properly licensed and approved for my use in accordance with TDCJ policies and procedures. • If installing or authorizing the installation of software on TDCJ computers, I will be responsible for ensuring that such software is only used in a manner that complies with the terms of the applicable software license agreement and all applicable TDCJ policies and procedures. ACCESS TO DATA - I AGREE THAT: • Proper authorization is required for access to all data owned by the TDCJ, except data that has been authorized by the TDCJ for public access. • I will not attempt to access or alter any data that I am not authorized to access in the performance of my job duties. • I will not use TDCJ information resources to review, alter, or otherwise act to obtain access to information about myself, or any relative, friend, or business associate. • I will use appropriate measures to prevent others from obtaining access to TDCJ data, such as securing my workstation either by logging off or using a password-protected screen saver.

Confidential and Sensitive Information. As an employee, contract employee, consultant, vendor, intern, or volunteer employee of the TDCJCC, you may have access to confidential or sensitive information through use of TDCJ information resources CC Information Resources or through your associated activities with TDCJ CC information systems. Confidential and sensitive information includes identifying information, federal tax information, personal health information, criminal justice information, or any information that is classified as confidential or sensitive by federal or state law, by TDCJ agency policy, or is defined as “Personal Identifying Information” under Texas Business and Commerce Code § §521.002(a)(1) or “Sensitive Personal Information” as defined by Texas Business and Commerce Code § §521.002(a)(2). As a user of TDCJ CC systems, you are required to conform to applicable laws and TDCJ CC policies governing confidential and sensitive information. Your principal obligations in this area are outlined below. You are required to read and to abide by these obligations. I UNDERSTAND THAT: • In the course of my job, I may have access to confidential and sensitive information related to: • Customerso Students, employees, users, contractors, and volunteers. This may include volunteers (e.g., records, conversations, applications, or financial information). This may include any information by which the identity of a person can be determined, either directly OR indirectly. • TDCJ o CC functions such as(e.g., information protected by the attorney-client and attorney work product privilege, student information, financial information, employment records, contracts, federal tax information, internal reports, memos and communications.). • o Third parties to include (e.g., vendor and information, customer information and information, contracts). I AGREE THAT: • I will, at all times, safeguard and retain the confidentiality, integrity, integrity and availability of confidential and sensitive information. • I will participate in CC Security Awareness Training and pass the associate examination within 60 days of initially being granted access to CC information technology resources, and annually there after. • I will only access confidential and sensitive information for business needs. • I will not in any way divulge, copy, release, sell, loan, review, alter, or destroy any confidential or sensitive information except as authorized. • I will not misuse or carelessly handle confidential and sensitive information. • I will encrypt confidential and sensitive information when appropriate, including when emailing such information outside the TDCJ agency and when storing such information on any portable electronic devices and device; including but not limited to laptops, phones, tablets or portable storage devices. • I will safeguard and will not disclose my password or other authorization I have that allows me to access confidential and sensitive information, except as permitted by law. • I will report activities by any other individual or entity that I suspect may compromise the confidentiality, integrity, integrity or availability of confidential and sensitive information. • My privileges hereunder are subject to periodic review, revision, and if appropriate, renewal. • I have no right or ownership interest in any confidential or sensitive information referred to in this Agreement. The TDCJ CC may revoke my access to confidential and sensitive information at any time and without notice. AUTHORIZED USE – I AGREE THAT: • I will use information resources only for official state-approved business. • I will not use information resources for personal reasons unless there are specific limited use exceptions permitted by the TDCJ division to which I am assigned. • I have no right to expect privacy in my use of TDCJ information resources or in the content of my communications sent or stored in TDCJ information resources. All user activity is subject to monitoring, logging, and review. • I will NOT attempt to circumvent the computer security system by using or attempting to use any transaction, software, files or resources I am not authorized to use. PERSONAL SECURITY IDENTIFICATION CODES (USER ID’S AND PASSWORDS) - I AGREE THAT: • I will receive and be required to use a personal security identification code (user ID and password) to gain access to and to utilize information resources. • My user ID and password are security measures that must be used only by me and I will not disclose my password to anyone. The only exception is in the event an information technology specialist requires the password to resolve an access problem. Once the problem has been corrected, I will immediately change my password. • I will be held personally responsible for any transactions initiated, actions taken, or for any harm, loss, or adverse consequences arising from the use of my user ID and password, including any unauthorized use by a third party if such party gains access to my user ID and password due to my misconduct or failure to abide by TDCJ policy. COPYRIGHTED MATERIAL - I AGREE THAT: • Any copyrighted material, including but not limited to commercial computer software, which may be made available, is protected by copyright laws and is NOT to be copied for any reason without permission from the copyright holder. • I will only install or use software on TDCJ computers that has been properly licensed and approved for my use in accordance with TDCJ policies and procedures. • If installing or authorizing the installation of software on TDCJ computers, I will be responsible for ensuring that such software is only used in a manner that complies with the terms of the applicable software license agreement and all applicable TDCJ policies and procedures. ACCESS TO DATA - I AGREE THAT: • Proper authorization is required for access to all data owned by the TDCJ, except data that has been authorized by the TDCJ for public access. • I will not attempt to access or alter any data that I am not authorized to access in the performance of my job duties. • I will not use TDCJ information resources to review, alter, or otherwise act to obtain access to information about myself, or any relative, friend, or business associate. • I will use appropriate measures to prevent others from obtaining access to TDCJ data, such as securing my workstation either by logging off or using a password-protected screen saver.