Common use of Confidential and Sensitive Information Clause in Contracts

Confidential and Sensitive Information. As an employee of TSD, you may have access to confidential or sensitive information through use of TSD Information Resources or through your associated activities with TSD information systems. Confidential and sensitive information includes identifying information, federal tax information, personal health information, criminal justice information, student data, or any information that is classified as confidential or sensitive by federal or state law, by TSD policy, or is defined as “Personal Identifying Information” under Texas Business and Commerce Code §521.002(a)(1) or “Sensitive Personal Information” as defined by Texas Business and Commerce Code §521.002(a)(2). As a user of TSD systems, you are required to conform to applicable laws and TSD policies governing confidential and sensitive information. Your principal obligations in this area are outlined below. You are required to read and to abide by these obligations. I understand that: • In the course of my job, I may have access to confidential and sensitive information related to: o Customers, employees, students, users, contractors, and volunteers (e.g., records, conversations, applications, financial information). This may include any information by which the identity of a person can be determined, either directly OR indirectly. o TSD functions (e.g., information protected by the attorney-client and attorney work product privilege, financial information, employment records, contracts, federal tax information, internal reports, memos and communications.). o Third parties (e.g., vendor information, customer information, contracts). I agree that: • I will, at all times, safeguard and retain the confidentiality, integrity and availability of confidential and sensitive information. • I will only access confidential and sensitive information for business needs. • I will not in any way divulge, copy, release, sell, loan, review, alter, or destroy any confidential or sensitive information except as authorized. • I will not misuse or carelessly handle confidential and sensitive information. • I will encrypt confidential and sensitive information when appropriate, including when emailing such information outside TSD and when storing such information on portable electronic devices and portable storage devices. • I will safeguard and will not disclose my password or other authorization I have that allows me to access confidential and sensitive information, except as permitted by law. • I will report activities by any other individual or entity that I suspect may compromise the confidentiality, integrity or availability of confidential and sensitive information. • My privileges hereunder are subject to periodic review, revision, and if appropriate, renewal. • I have no right or ownership interest in any confidential or sensitive information referred to in this Agreement. TSD may revoke my access to confidential and sensitive information at any time and without notice. I will not retain any sensitive or confidential TSD information upon termination of employment. • I have no right or ownership interest in any TSD Information Resources, including TSD equipment, devices, or software. I will return all TSD Information Resources to TSD upon termination of employment unless there are specific limited use exceptions permitted by TSD. Authorized Use – I agree that: • I will use Information Resources only for official state-approved business. • I will not use Information Resources for personal reasons unless there are specific limited use exceptions permitted by the TSD division to which I am assigned. • I have no right to expect privacy in my use of TSD Information Resources or in the content of my communications sent or stored in TSD Information Resources. All user activity is subject to monitoring, logging, and review. Personal Security Identification Codes (User ID’s and Passwords) - I agree that: • I will receive and will be required to use a personal security identification code (User ID and Password) to gain access to and to use Information Resources. • My user ID and password are security measures that must be used only by me and I will not disclose my password to anyone. • I will be held personally responsible for any transactions initiated, actions taken, or for any harm, loss, or adverse consequences arising from the use of my user ID and password, including any unauthorized use by a third party if such party gains access to my user ID and password due to my misconduct or failure to abide by TSD policy. Software - I agree that: • I will only install or use software on TSD computers that has been properly licensed and approved for my use in accordance with TSD policies and procedures. • If installing or authorizing the installation of software on TSD computers, I will be responsible for ensuring that such software is only used in a manner that complies with the terms of the applicable software license agreement and all applicable TSD policies and procedures. Access to Data - I agree that: • Proper authorization is required for access to all data owned by TSD, except data that has been authorized by TSD for public access. • I will not attempt to access or alter any data that I am not authorized to access in the performance of my job duties. • I will not use TSD Information Resources to review, alter, or otherwise act to obtain access to information about myself, or any relative, friend, or business associate. • I will use appropriate measures to prevent others from obtaining access to TSD data, such as securing my workstation either by logging off or using a password-protected screen saver. o Before leaving a workstation with access to files containing confidential or sensitive information, I will log- off or activate a password-protected screen saver. o If I receive a request for the release of TSD information or data, I will follow TSD’s policies and procedures for the release of information. Security of Equipment - I agree that: • I will not remove Information Resources from TSD property without proper prior authorization and approval of staff with appropriate authority. • I will immediately report all security incidents, including the loss or theft of any Information Resources or data, to TSD management and to the TSD Information Security Officer. I agree that: • I am required to be aware of, read, and comply with the information in the TSD Acceptable Use and Cybersecurity Policies. • I must comply with the policies concerning Information Resources set out in the TSD Policies and Procedures Manual, as well as any changes to those policies. • I must comply with the information security policies, standards, and guidelines of the TSD division that employs me, including any changes to those policies, standards, and guidelines. • My failure to comply with this Agreement may result in loss of access privileges to TSD Information Resources or other disciplinary action up to and including termination for employees; termination or alteration of employment relations in the case of temporaries, contractors, or consultants; or dismissal for interns and volunteers. Additionally, individuals could also be subject to additional civil liability, and/or criminal charges.

Confidential and Sensitive Information. As an employee of TSDCC, you may have access to confidential or sensitive information through use of TSD CC Information Resources or through your associated activities with TSD CC information systems. Confidential and sensitive information includes identifying information, federal tax information, personal health information, criminal justice information, student data, or any information that is classified as confidential or sensitive by federal or state law, by TSD agency policy, or is defined as “Personal Identifying Information” under Texas Business and Commerce Code §521.002(a)(1) or “Sensitive Personal Information” as defined by Texas Business and Commerce Code §521.002(a)(2). As a user of TSD CC systems, you are required to conform to applicable laws and TSD CC policies governing confidential and sensitive information. Your principal obligations in this area are outlined below. You are required to read and to abide by these obligations. I understand that: • In the course of my job, I may have access to confidential and sensitive information related to: o CustomersStudents, employees, students, users, contractors, and volunteers (e.g., records, conversations, applications, financial information). This may include any information by which the identity of a person can be determined, either directly OR indirectly. I Agree that: o TSD CC functions (e.g., information protected by the attorney-client and attorney work product privilege, student information, financial information, employment records, contracts, federal tax information, internal reports, memos and communications.). o Third parties (e.g., vendor information, customer information, contracts). I agree that: • I will, at all times, safeguard and retain the confidentiality, integrity and availability of confidential and sensitive information. • I will participate in CC Security Awareness Training and pass the associate examination within 60 days of initially being granted access to CC information technology resources, and annually there after. • I will only access confidential and sensitive information for business needs. • I will not in any way divulge, copy, release, sell, loan, review, alter, or destroy any confidential or sensitive information except as authorized. • I will not misuse or carelessly handle confidential and sensitive information. • I will encrypt confidential and sensitive information when appropriate, including when emailing such information outside TSD the agency and when storing such information on any portable electronic devices and device; including but not limited to laptops, phones, tablets or portable storage devices. • I will safeguard and will not disclose my password or other authorization I have that allows me to access confidential and sensitive information, except as permitted by law. • I will report activities by any other individual or entity that I suspect may compromise the confidentiality, integrity or availability of confidential and sensitive information. • My privileges hereunder are subject to periodic review, revision, and if appropriate, renewal. • I have no right or ownership interest in any confidential or sensitive information referred to in this Agreement. TSD CC may revoke my access to confidential and sensitive information at any time and without notice. I will not retain any sensitive or confidential TSD information upon termination of employment. • I have no right or ownership interest in any TSD Information Resources, including TSD equipment, devices, or software. I will return all TSD Information Resources to TSD upon termination of employment unless there are specific limited use exceptions permitted by TSD. Authorized Use – I agree that: • I will use Information Resources only for official state-approved business. • I will not use Information Resources for personal reasons unless there are specific limited use exceptions permitted by the TSD division to which I am assigned. • I have no right to expect privacy in my use of TSD Information Resources or in the content of my communications sent or stored in TSD Information Resources. All user activity is subject to monitoring, logging, and review. Personal Security Identification Codes (User ID’s and Passwords) - I agree that: • I will receive and will be required to use a personal security identification code (User ID and Password) to gain access to and to use Information Resources. • My user ID and password are security measures that must be used only by me and I will not disclose my password to anyone. • I will be held personally responsible for any transactions initiated, actions taken, or for any harm, loss, or adverse consequences arising from the use of my user ID and password, including any unauthorized use by a third party if such party gains access to my user ID and password due to my misconduct or failure to abide by TSD policy. Software - I agree that: • I will only install or use software on TSD computers that has been properly licensed and approved for my use in accordance with TSD policies and procedures. • If installing or authorizing the installation of software on TSD computers, I will be responsible for ensuring that such software is only used in a manner that complies with the terms of the applicable software license agreement and all applicable TSD policies and procedures. Access to Data - I agree that: • Proper authorization is required for access to all data owned by TSD, except data that has been authorized by TSD for public access. • I will not attempt to access or alter any data that I am not authorized to access in the performance of my job duties. • I will not use TSD Information Resources to review, alter, or otherwise act to obtain access to information about myself, or any relative, friend, or business associate. • I will use appropriate measures to prevent others from obtaining access to TSD data, such as securing my workstation either by logging off or using a password-protected screen saver. o Before leaving a workstation with access to files containing confidential or sensitive information, I will log- off or activate a password-protected screen saver. o If I receive a request for the release of TSD information or data, I will follow TSD’s policies and procedures for the release of information. Security of Equipment - I agree that: • I will not remove Information Resources from TSD property without proper prior authorization and approval of staff with appropriate authority. • I will immediately report all security incidents, including the loss or theft of any Information Resources or data, to TSD management and to the TSD Information Security Officer. I agree that: • I am required to be aware of, read, and comply with the information in the TSD Acceptable Use and Cybersecurity Policies. • I must comply with the policies concerning Information Resources set out in the TSD Policies and Procedures Manual, as well as any changes to those policies. • I must comply with the information security policies, standards, and guidelines of the TSD division that employs me, including any changes to those policies, standards, and guidelines. • My failure to comply with this Agreement may result in loss of access privileges to TSD Information Resources or other disciplinary action up to and including termination for employees; termination or alteration of employment relations in the case of temporaries, contractors, or consultants; or dismissal for interns and volunteers. Additionally, individuals could also be subject to additional civil liability, and/or criminal charges.

Confidential and Sensitive Information. As an employee employee, contract employee, consultant, vendor, intern, volunteer, or other individual of TSDthe TDCJ, you may have access to confidential or sensitive information through use of TSD Information Resources TDCJ information resources or through your associated activities with TSD TDCJ information systems. Confidential and sensitive information includes identifying information, federal tax information, personal health information, criminal justice information, student data, or any information that is classified as confidential or sensitive by federal or state law, by TSD TDCJ policy, or is defined as “Personal Identifying Information” or “Sensitive Personal Information” under Texas Business and Commerce Code §521.002(a)(1) or “Sensitive Personal Information” as defined by § 521.002(a)(1)-(2). Under 1 Texas Business Administrative Code § 202.1(22), an information system includes interconnected set of information resources under the same direct management control that shares common functionality. An information system normally includes hardware, software, network infrastructure, information, applications, communications and Commerce Code §521.002(a)(2)people. As a user of TSD TDCJ systems, you are required to conform to applicable laws and TSD TDCJ policies governing confidential and sensitive information. Your principal obligations in this area are outlined below. You are required to read and to abide by these obligations. I understand thatUNDERSTAND THAT: • In the course of my job, I may have access to confidential and sensitive information related to: o Customers• Offenders, customers, employees, students, users, contractors, and volunteers (e.g., volunteers. This may include records, conversations, applications, or financial information). This may include any information by which the identity of a person can be determined, either directly OR indirectly. o TSD • TDCJ functions (e.g.such as, information protected by the attorney-client and attorney work product privilege, financial information, employment records, contracts, federal tax information, internal reports, memos and communications.). o • Third parties (e.g., to include vendor information, and customer information, information and contracts). I agree thatAGREE THAT: • I will, at all times, safeguard and retain the confidentiality, integrity integrity, and availability of confidential and sensitive information. • I will only access confidential and sensitive information for business needs. • I will not in any way divulge, copy, release, sell, loan, review, alter, or destroy any confidential or sensitive information except as authorized. • I will not misuse or carelessly handle confidential and sensitive information. • I will encrypt confidential and sensitive information when appropriate, including when emailing such information outside TSD the TDCJ and when storing such information on portable electronic devices and portable storage devices. • I will safeguard and will not disclose my password or other authorization I have that allows me to access confidential and sensitive information, except as permitted by law. • I will report activities by any other individual or entity that I suspect may compromise the confidentiality, integrity integrity, or availability of confidential and sensitive information. • My privileges hereunder are subject to periodic review, revision, and if appropriate, renewal. • I have no right or ownership interest in any confidential or sensitive information referred to in this Agreement. TSD The TDCJ may revoke my access to confidential and sensitive information at any time and without notice. I will not retain any sensitive or confidential TSD information upon termination of employment. • I have no right or ownership interest in any TSD Information Resources, including TSD equipment, devices, or software. I will return all TSD Information Resources to TSD upon termination of employment unless there are specific limited use exceptions permitted by TSD. Authorized Use AUTHORIZED USE – I agree thatAGREE THAT: • I will use Information Resources information resources only for official state-approved business. • I will not use Information Resources information resources for personal reasons unless there are specific limited use exceptions permitted by the TSD TDCJ division to which I am assigned. • I have no right to expect privacy in my use of TSD Information Resources TDCJ information resources or in the content of my communications sent or stored in TSD Information ResourcesTDCJ information resources. All user activity is subject to monitoring, logging, and review. Personal Security Identification Codes • I will NOT attempt to circumvent the computer security system by using or attempting to use any transaction, software, files or resources I am not authorized to use. PERSONAL SECURITY IDENTIFICATION CODES (User USER ID’s and Passwords’S AND PASSWORDS) - I agree thatAGREE THAT: • I will receive and will be required to use a personal security identification code (User user ID and Passwordpassword) to gain access to and to use Information Resourcesutilize information resources. • My user ID and password are security measures that must be used only by me and I will not disclose my password to anyone. The only exception is in the event an information technology specialist requires the password to resolve an access problem. Once the problem has been corrected, I will immediately change my password. • I will be held personally responsible for any transactions initiated, actions taken, or for any harm, loss, or adverse consequences arising from the use of my user ID and password, including any unauthorized use by a third party if such party gains access to my user ID and password due to my misconduct or failure to abide by TSD TDCJ policy. Software COPYRIGHTED MATERIAL - I agree thatAGREE THAT: • Any copyrighted material, including but not limited to commercial computer software, which may be made available, is protected by copyright laws and is NOT to be copied for any reason without permission from the copyright holder. • I will only install or use software on TSD TDCJ computers that has been properly licensed and approved for my use in accordance with TSD TDCJ policies and procedures. • If installing or authorizing the installation of software on TSD TDCJ computers, I will be responsible for ensuring that such software is only used in a manner that complies with the terms of the applicable software license agreement and all applicable TSD TDCJ policies and procedures. Access to Data ACCESS TO DATA - I agree thatAGREE THAT: • Proper authorization is required for access to all data owned by TSDthe TDCJ, except data that has been authorized by TSD the TDCJ for public access. • I will not attempt to access or alter any data that I am not authorized to access in the performance of my job duties. • I will not use TSD Information Resources TDCJ information resources to review, alter, or otherwise act to obtain access to information about myself, or any relative, friend, or business associate. • I will use appropriate measures to prevent others from obtaining access to TSD TDCJ data, such as securing my workstation either by logging off or using a password-protected screen saver. o Before leaving a workstation with access to files containing confidential or sensitive information, I will log- off or activate a password-protected screen saver. o If I receive a request for the release of TSD information or data, I will follow TSD’s policies and procedures for the release of information. Security of Equipment - I agree that: • I will not remove Information Resources from TSD property without proper prior authorization and approval of staff with appropriate authority. • I will immediately report all security incidents, including the loss or theft of any Information Resources or data, to TSD management and to the TSD Information Security Officer. I agree that: • I am required to be aware of, read, and comply with the information in the TSD Acceptable Use and Cybersecurity Policies. • I must comply with the policies concerning Information Resources set out in the TSD Policies and Procedures Manual, as well as any changes to those policies. • I must comply with the information security policies, standards, and guidelines of the TSD division that employs me, including any changes to those policies, standards, and guidelines. • My failure to comply with this Agreement may result in loss of access privileges to TSD Information Resources or other disciplinary action up to and including termination for employees; termination or alteration of employment relations in the case of temporaries, contractors, or consultants; or dismissal for interns and volunteers. Additionally, individuals could also be subject to additional civil liability, and/or criminal charges.

Confidential and Sensitive Information. As an employee of TSDSPC, you may have access to confidential or sensitive information through use of TSD SPC Information Resources or through your associated activities with TSD SPC information systems. Confidential and sensitive information includes identifying information, federal tax information, personal health information, criminal justice information, student data, or any information that is classified as confidential or sensitive by federal or state law, by TSD agency policy, or is defined as “Personal Identifying Information” under Texas Business and Commerce Code §521.002(a)(1) or “Sensitive Personal Information” as defined by Texas Business and Commerce Code §521.002(a)(2). As a user of TSD SPC systems, you are required to conform to applicable laws and TSD SPC policies governing confidential and sensitive information. Your principal obligations in this area are outlined below. You are required to read and to abide by these obligations. I understand that: • In the course of my job, I may have access to confidential and sensitive information related to: o CustomersStudents, employees, students, users, contractors, and volunteers (e.g., records, conversations, applications, financial information). This may include any information by which the identity of a person can be determined, either directly OR indirectly. o TSD SPC functions (e.g., information protected by the attorney-client and attorney work product privilege, student information, financial information, employment records, contracts, federal tax information, internal reports, memos and communications.). o Third parties (e.g., vendor information, customer information, contracts). I agree Agree that: • I will, at all times, safeguard and retain the confidentiality, integrity and availability of confidential and sensitive information. • I will participate in SPC Security Awareness Training and pass the associate examination within 30 days of initially being granted access to SPC information technology resources, and annually there after. I will only access confidential and sensitive information for business needs. • I will not in any way divulge, copy, release, sell, loan, review, alter, or destroy any confidential or sensitive information except as authorized. • I will not misuse or carelessly handle confidential and sensitive information. • I will encrypt confidential and sensitive information when appropriate, including when emailing such information outside TSD the agency and when storing such information on any portable electronic devices and device; including but not limited to laptops, phones, tablets or portable storage devices. • I will safeguard and will not disclose my password or other authorization I have that allows me to access confidential and sensitive information, except as permitted by law. • I will report activities by any other individual or entity that I suspect may compromise the confidentiality, integrity or availability of confidential and sensitive information. • My privileges hereunder are subject to periodic review, revision, and if appropriate, renewal. • I have no right or ownership interest in any confidential or sensitive information referred to in this Agreement. TSD SPC may revoke my access to confidential and sensitive information at any time and without notice. I will not retain any sensitive or confidential TSD information upon termination of employment. • I have no right or ownership interest in any TSD Information Resources, including TSD equipment, devices, or software. I will return all TSD Information Resources to TSD upon termination of employment unless there are specific limited use exceptions permitted by TSD. Authorized Use – I i agree that: • I will use Information Resources only for official stateSPC-approved business. • I will not use Information Resources for personal reasons unless there are specific limited use exceptions permitted by the TSD division to which I am assignedSPC. • I have no right to expect privacy in my use of TSD agency Information Resources or in the content of my communications sent or stored in TSD SPC Information Resources. All user activity is subject to monitoring, logging, and review. Personal Security Identification Codes (User ID’s and Passwords) - I agree that: • I will receive and will be required to use a personal security identification code (User ID and Password) to gain access to and to use Information Resources. • My user ID and password are security measures that must be used only by me and I will not disclose my password to anyone. • I will be held personally responsible for any transactions initiated, actions taken, or for any harm, loss, or adverse consequences arising from the use of my user ID and password, including any unauthorized use by a third party if such party gains access to my user ID and password due to my misconduct or failure to abide by TSD agency policy. Software - I agree that: • I will only install or use software on TSD computers that has been properly licensed and approved for my use in accordance with TSD policies and procedures. • If installing or authorizing the installation of software on TSD computers, I will be responsible for ensuring that such software is only used in a manner that complies with the terms of the applicable software license agreement and all applicable TSD policies and procedures. Access to Data - I agree that: • Proper authorization is required for access to all data owned by TSD, except data that has been authorized by TSD for public access. • I will not attempt to access or alter any data that I am not authorized to access in the performance of my job duties. • I will not use TSD Information Resources to review, alter, or otherwise act to obtain access to information about myself, or any relative, friend, or business associate. • I will use appropriate measures to prevent others from obtaining access to TSD data, such as securing my workstation either by logging off or using a password-protected screen saver. o Before leaving a workstation with access to files containing confidential or sensitive information, I will log- off or activate a password-protected screen saver. o If I receive a request for the release of TSD information or data, I will follow TSD’s policies and procedures for the release of information. Security of Equipment - I agree that: • I will not remove Information Resources from TSD property without proper prior authorization and approval of staff with appropriate authority. • I will immediately report all security incidents, including the loss or theft of any Information Resources or data, to TSD management and to the TSD Information Security Officer. I agree that: • I am required to be aware of, read, and comply with the information in the TSD Acceptable Use and Cybersecurity Policies. • I must comply with the policies concerning Information Resources set out in the TSD Policies and Procedures Manual, as well as any changes to those policies. • I must comply with the information security policies, standards, and guidelines of the TSD division that employs me, including any changes to those policies, standards, and guidelines. • My failure to comply with this Agreement may result in loss of access privileges to TSD Information Resources or other disciplinary action up to and including termination for employees; termination or alteration of employment relations in the case of temporaries, contractors, or consultants; or dismissal for interns and volunteers. Additionally, individuals could also be subject to additional civil liability, and/or criminal charges.:

Confidential and Sensitive Information. As an employee of TSDthe agency, you may have access to confidential or sensitive information through use of TSD Information Resources agency information resources or through your associated activities with TSD agency information systems. Confidential and sensitive information includes identifying information, federal tax information, personal health information, criminal justice information, student data, or any information that is classified as confidential or sensitive by federal or state law, by TSD agency policy, or is defined as “Personal Identifying Information” under Texas Business and Commerce Code §§ 521.002(a)(1) or “Sensitive Personal Information” as defined by Texas Business and Commerce Code §§ 521.002(a)(2). As a user of TSD agency systems, you are required to conform to applicable laws and TSD agency policies governing confidential and sensitive information. Your principal obligations in this area are outlined below. You are required to read and to abide by these obligations. I understand that: • In the course of my job, I may have access to confidential and sensitive information related to: o Customers, employees, students, users, contractors, and volunteers (e.g., volunteers. This may include records, conversations, applications, or financial information). This may include any information by which the identity of a person can be determined, either directly OR indirectly. o TSD Agency functions (e.g.such as, information protected by the attorney-client and attorney work product privilege, financial information, employment records, contracts, federal tax information, internal reports, memos and communications.). o Third parties (e.g., to include vendor information, and customer information, information and contracts). I agree that: • I will, at all times, safeguard and retain the confidentiality, integrity integrity, and availability of confidential and sensitive information. • I will only access confidential and sensitive information for business needs. • I will not in any way divulge, copy, release, sell, loan, review, alter, or destroy any confidential or sensitive information except as authorized. • I will not misuse or carelessly handle confidential and sensitive information. • I will encrypt confidential and sensitive information when appropriate, including when emailing such information outside TSD the agency and when storing such information on portable electronic devices and portable storage devices. • I will safeguard and will not disclose my password or other authorization I have that allows me to access confidential and sensitive information, except as permitted by law. • I will report activities by any other individual or entity that I suspect may compromise the confidentiality, integrity integrity, or availability of confidential and sensitive information. • My privileges hereunder are subject to periodic review, revision, and if appropriate, renewal. • I have no right or ownership interest in any confidential or sensitive information referred to in this Agreement. TSD The agency may revoke my access to confidential and sensitive information at any time and without notice. I will not retain any sensitive or confidential TSD information upon termination of employment. • I have no right or ownership interest in any TSD Information Resources, including TSD equipment, devices, or software. I will return all TSD Information Resources to TSD upon termination of employment unless there are specific limited use exceptions permitted by TSD. Authorized Use – I agree that: • I will use Information Resources information resources only for official state-approved business. • I will not use Information Resources information resources for personal reasons unless there are specific limited use exceptions permitted by the TSD agency division to which I am assigned. • I have no right to expect privacy in my use of TSD Information Resources agency information resources or in the content of my communications sent or stored in TSD Information Resourcesagency information resources. All user activity is subject to monitoring, logging, and review. I will NOT attempt to circumvent the computer security system by using or attempting to use any transaction, software, files or resources I am not authorized to use. Personal Security Identification Codes (User ID’s and Passwords) - I agree that: • I will receive and will be required to use a personal security identification code (User user ID and Passwordpassword) to gain access to and to use Information Resourcesutilize information resources. • My user ID and password are security measures that must be used only by me and I will not disclose my password to anyone. • The only exception is in the event an information technology specialist requires the password to resolve an access problem. Once the problem has been corrected, I will immediately change my password. I will be held personally responsible for any transactions initiated, actions taken, or for any harm, loss, or adverse consequences arising from the use of my user ID and password, including any unauthorized use by a third party if such party gains access to my user ID and password due to my misconduct or failure to abide by TSD agency policy. Software Copyrighted Material - I agree that: • Any copyrighted material, including but not limited to commercial computer software, which may be made available, is protected by copyright laws and is NOT to be copied for any reason without permission from the copyright holder. I will only install or use software on TSD agency computers that has been properly licensed and approved for my use in accordance with TSD agency policies and procedures. • If installing or authorizing the installation of software on TSD agency computers, I will be responsible for ensuring that such software is only used in a manner that complies with the terms of the applicable software license agreement and all applicable TSD agency policies and procedures. Access to Data - I agree that: • Proper authorization is required for access to all data owned by TSDagency, except data that has been authorized by TSD the agency for public access. • I will not attempt to access or alter any data that I am not authorized to access in the performance of my job duties. • I will not use TSD Information Resources agency information resources to review, alter, or otherwise act to obtain access to information about myself, or any relative, friend, or business associate. • I will use appropriate measures to prevent others from obtaining access to TSD agency data, such as securing my workstation either by logging off or using a password-protected screen saver. o Before I will logoff or activate a password-protected screen saver, before leaving a workstation with access to files containing confidential or sensitive information, . I will log- off or activate a password-protected screen saver. o If follow agency policies and procedures for the release of information, if I receive a request for the release of TSD agency information or data, I will follow TSD’s policies and procedures for the release of information. Security of Equipment - I agree that: • I will not remove Information Resources information resources from TSD agency property without proper prior authorization and approval of staff with from the appropriate authority. • I will immediately report all security incidents, including the loss or theft of any Information Resources information resources or data, to TSD agency management and to the TSD Information Security Officeragency information security officer. I agree that: • I am required to be aware of, read, and comply with the information in the TSD Acceptable Use and Cybersecurity Policies. • agency Information Security Policy found at xxxx://xxx.xxxx.xxxxx.xxx/TDCJ_Intranet/docs/Information_Resource_Security_Program.pdf I must comply with the policies concerning Information Resources information resources set out in the TSD Policies agency policies and Procedures Manualprocedures manual, as well as any changes to those policies. • I must comply with the information security policies, standards, and guidelines of the TSD agency division that employs me, including any changes to those policies, standards, and guidelines. • My failure to comply with this Agreement may result in loss of access privileges to TSD Information Resources agency information resources or other disciplinary action up to and including termination for employees; termination or alteration of employment relations in the case of temporaries, contractors, or consultants; or dismissal for interns and volunteers. Additionally, individuals I could also be subject to additional civil liability, liability and/or criminal charges., including “Breach of Computer Security” as defined in the Texas Penal Code § 33.02. Signature: Date:  

Confidential and Sensitive Information. As an employee employee, contract employee, consultant, vendor, intern, or volunteer of TSDthe TDCJ, you may have access to confidential or sensitive information through use of TSD Information Resources TDCJ information resources or through your associated activities with TSD TDCJ information systems. Confidential and sensitive information includes identifying information, federal tax information, personal health information, criminal justice information, student data, or any information that is classified as confidential or sensitive by federal or state law, by TSD TDCJ policy, or is defined as “Personal Identifying Information” under Texas Business and Commerce Code §§ 521.002(a)(1) or “Sensitive Personal Information” as defined by Texas Business and Commerce Code §§ 521.002(a)(2). As a user of TSD TDCJ systems, you are required to conform to applicable laws and TSD TDCJ policies governing confidential and sensitive information. Your principal obligations in this area are outlined below. You are required to read and to abide by these obligations. I understand thatUNDERSTAND THAT: • In the course of my job, I may have access to confidential and sensitive information related to: o • Customers, employees, students, users, contractors, and volunteers (e.g., volunteers. This may include records, conversations, applications, or financial information). This may include any information by which the identity of a person can be determined, either directly OR indirectly. o TSD • TDCJ functions (e.g.such as, information protected by the attorney-client and attorney work product privilege, financial information, employment records, contracts, federal tax information, internal reports, memos and communications.). o • Third parties (e.g., to include vendor information, and customer information, information and contracts). I agree thatAGREE THAT: • I will, at all times, safeguard and retain the confidentiality, integrity integrity, and availability of confidential and sensitive information. • I will only access confidential and sensitive information for business needs. • I will not in any way divulge, copy, release, sell, loan, review, alter, or destroy any confidential or sensitive information except as authorized. • I will not misuse or carelessly handle confidential and sensitive information. • I will encrypt confidential and sensitive information when appropriate, including when emailing such information outside TSD the TDCJ and when storing such information on portable electronic devices and portable storage devices. • I will safeguard and will not disclose my password or other authorization I have that allows me to access confidential and sensitive information, except as permitted by law. • I will report activities by any other individual or entity that I suspect may compromise the confidentiality, integrity integrity, or availability of confidential and sensitive information. • My privileges hereunder are subject to periodic review, revision, and if appropriate, renewal. • I have no right or ownership interest in any confidential or sensitive information referred to in this Agreement. TSD The TDCJ may revoke my access to confidential and sensitive information at any time and without notice. I will not retain any sensitive or confidential TSD information upon termination of employment. • I have no right or ownership interest in any TSD Information Resources, including TSD equipment, devices, or software. I will return all TSD Information Resources to TSD upon termination of employment unless there are specific limited use exceptions permitted by TSD. Authorized Use AUTHORIZED USE – I agree thatAGREE THAT: • I will use Information Resources information resources only for official state-approved business. • I will not use Information Resources information resources for personal reasons unless there are specific limited use exceptions permitted by the TSD TDCJ division to which I am assigned. • I have no right to expect privacy in my use of TSD Information Resources TDCJ information resources or in the content of my communications sent or stored in TSD Information ResourcesTDCJ information resources. All user activity is subject to monitoring, logging, and review. Personal Security Identification Codes • I will NOT attempt to circumvent the computer security system by using or attempting to use any transaction, software, files or resources I am not authorized to use. PERSONAL SECURITY IDENTIFICATION CODES (User USER ID’s and Passwords’S AND PASSWORDS) - I agree thatAGREE THAT: • I will receive and will be required to use a personal security identification code (User user ID and Passwordpassword) to gain access to and to use Information Resourcesutilize information resources. • My user ID and password are security measures that must be used only by me and I will not disclose my password to anyone. The only exception is in the event an information technology specialist requires the password to resolve an access problem. Once the problem has been corrected, I will immediately change my password. • I will be held personally responsible for any transactions initiated, actions taken, or for any harm, loss, or adverse consequences arising from the use of my user ID and password, including any unauthorized use by a third party if such party gains access to my user ID and password due to my misconduct or failure to abide by TSD TDCJ policy. Software COPYRIGHTED MATERIAL - I agree thatAGREE THAT: • Any copyrighted material, including but not limited to commercial computer software, which may be made available, is protected by copyright laws and is NOT to be copied for any reason without permission from the copyright holder. • I will only install or use software on TSD TDCJ computers that has been properly licensed and approved for my use in accordance with TSD TDCJ policies and procedures. • If installing or authorizing the installation of software on TSD TDCJ computers, I will be responsible for ensuring that such software is only used in a manner that complies with the terms of the applicable software license agreement and all applicable TSD TDCJ policies and procedures. Access to Data ACCESS TO DATA - I agree thatAGREE THAT: • Proper authorization is required for access to all data owned by TSDthe TDCJ, except data that has been authorized by TSD the TDCJ for public access. • I will not attempt to access or alter any data that I am not authorized to access in the performance of my job duties. • I will not use TSD Information Resources TDCJ information resources to review, alter, or otherwise act to obtain access to information about myself, or any relative, friend, or business associate. • I will use appropriate measures to prevent others from obtaining access to TSD TDCJ data, such as securing my workstation either by logging off or using a password-protected screen saver. o Before leaving a workstation with access to files containing confidential or sensitive information, I will log- off or activate a password-protected screen saver. o If I receive a request for the release of TSD information or data, I will follow TSD’s policies and procedures for the release of information. Security of Equipment - I agree that: • I will not remove Information Resources from TSD property without proper prior authorization and approval of staff with appropriate authority. • I will immediately report all security incidents, including the loss or theft of any Information Resources or data, to TSD management and to the TSD Information Security Officer. I agree that: • I am required to be aware of, read, and comply with the information in the TSD Acceptable Use and Cybersecurity Policies. • I must comply with the policies concerning Information Resources set out in the TSD Policies and Procedures Manual, as well as any changes to those policies. • I must comply with the information security policies, standards, and guidelines of the TSD division that employs me, including any changes to those policies, standards, and guidelines. • My failure to comply with this Agreement may result in loss of access privileges to TSD Information Resources or other disciplinary action up to and including termination for employees; termination or alteration of employment relations in the case of temporaries, contractors, or consultants; or dismissal for interns and volunteers. Additionally, individuals could also be subject to additional civil liability, and/or criminal charges.