Common use of Confidentiality and Safeguarding Information Clause in Contracts

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees may have access to confidential information. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. Contractor must implement procedures to ensure the protection and confidentiality of all data, files, and records involved with this Contract. Except as necessary to fulfill the terms of this Contract and with the permission of the Customer, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the Customer. Contractor and Contractor’s employees agree not to use or disclose any information concerning a recipient of services under the State or the Customer for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. If Contractor or Contractor’s employees have access to confidential information in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer Information Technology Security procedures and policies. Contractor (including its employees, subcontractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contract. Contractor shall notify the Department and the Customer in writing of any disclosure of unsecured confidential information by Contractor, its employees, agents or representatives which is not in compliance with the terms of the Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees may have access to confidential information. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. Contractor must implement procedures to ensure the protection and confidentiality of all data, files, and records involved with this Contract. Except as necessary to fulfill the terms of this Contract and with the permission of the Customer, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the Customer. Contractor and Contractor’s employees agree not to use or disclose any information concerning a recipient of services under the State or the Customer for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. If Contractor or Contractor’s employees have access to confidential information in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer Information Technology Security procedures and policies. Contractor (including its employees, subcontractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contract. Contractor shall notify the Department and the Customer in writing of any disclosure of unsecured confidential information by Contractor, its employees, agents or representatives which is not in compliance with the terms of the Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-.

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the appropriate protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerDEO, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerDEO. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have has access to confidential information either DEO’s network or any DEO applications, or both, in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor (including its employees, subcontractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contractContract. 6. Contractor shall notify the Department and the Customer DEO in writing of any disclosure of unsecured confidential information of DEO by Contractor, its employees, agents agents, or representatives which is not in compliance with the terms of the this Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub-contractors or agents. For purposes of this Contract, “Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of DEO information in Contractor’s possession or electronic interference with DEO operations; however, random attempts at access shall not be considered a security incident. Contractor shall make a report to DEO not more than seven (7) business days after Contractor learns of such use or disclosure. Contractor’s report shall identify, to the extent known: (i) the nature of the unauthorized use or disclosure, (ii) the confidential information used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what Contractor has done or shall do to mitigate any deleterious effect of the unauthorized use or disclosure, and (v) what corrective action Contractor has taken or shall take to prevent future similar unauthorized use or disclosure. Contractor shall provide such other information, including a written report, as reasonably requested by DEO’s Information Security Manager.

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the appropriate protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerDEO, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerDEO. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have has access to confidential information either DEO’s network or any DEO applications, or both, in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor (including its employees, subcontractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contractContract. 6. Contractor shall notify the Department and the Customer DEO in writing of any disclosure of unsecured confidential information of DEO by Contractor, its employees, agents agents, or representatives which is not in compliance with the terms of the this Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub‐contractors or agents. For purposes of this Contract, “Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of DEO information in Contractor’s possession or electronic interference with DEO operations; however, random attempts at access shall not be considered a security incident. Contractor shall make a report to DEO not more than seven (7) business days after Contractor learns of such use or disclosure. Contractor’s report shall identify, to the extent known: (i) the nature of the unauthorized use or disclosure, (ii) the confidential information used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what Contractor has done or shall do to mitigate any deleterious effect of the unauthorized use or disclosure, and (v) what corrective action Contractor has taken or shall take to prevent future similar unauthorized use or disclosure. Contractor shall provide such other information, including a written report, as reasonably requested by XXX’s Information Security Manager.

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerDEO, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerDEO. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have has access to confidential information either DEO’s network or any DEO applications, or both, in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor (including its employees, subcontractorssub‐contractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contract. 6. Contractor shall notify the Department and the Customer DEO in writing of any disclosure of unsecured confidential information of DEO by Contractor, its employees, agents or representatives which is not in compliance with the terms of the Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub‐contractors or agents. For purposes of this Contract, “Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of DEO information in Contractor’s possession or electronic interference with DEO operations; however, random attempts at access shall not be considered a security incident. Contractor shall make a report to DEO not more than seven (7) business days after Contractor learns of such use or disclosure. Contractor’s report shall identify, to the extent known: (i) the nature of the unauthorized use or

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the appropriate protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerDEO, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerDEO. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicableor 5. If Contractor or Contractor’s employees have has access to confidential information either DEO’s network or any DEO applications, or both, in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor (including its employees, subcontractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contractContract. 6. Contractor shall notify the Department and the Customer DEO in writing of any disclosure of unsecured confidential information of DEO by Contractor, its employees, agents agents, or representatives which is not in compliance with the terms of the this Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub-contractors or agents. For purposes of this Contract, “Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of DEO information in Contractor’s possession or electronic interference with DEO operations; however, random attempts at access shall not be considered a security incident. Contractor shall make a report to DEO not more than seven (7) business days after Contractor learns of such use or disclosure. Contractor’s report shall identify, to the extent known: (i) the nature of the unauthorized use or disclosure, (ii) the confidential information used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what Contractor has done or shall do to mitigate any deleterious effect of the unauthorized use or disclosure, and (v) what corrective action Contractor has taken or shall take to prevent future similar unauthorized use or disclosure. Contractor shall provide such other information, including a written report, as reasonably requested by XXX’s Information Security Manager.

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter chapter 119, F.S., and other applicable state and federal Federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerDEO, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerDEO. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal Federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have has access to confidential information either DEO’s network or any DEO applications, or both, in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor (including its employees, subcontractorssub-contractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contract. 6. Contractor shall notify the Department and the Customer DEO in writing of any disclosure of unsecured confidential information of DEO by Contractor, its employees, agents or representatives which is not in compliance with the terms of the Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub-contractors or agents. For purposes of this Contract, “Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of DEO information in Contractor’s possession or electronic interference with DEO operations; however, random attempts at access shall not be considered a security incident. Contractor shall make a report to DEO not more than seven (7) business days after Contractor learns of such use or disclosure. Contractor’s report shall identify, to the extent known: (i) the nature of the unauthorized use or disclosure, (ii) the confidential information used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what Contractor has done or shall do to mitigate any deleterious effect of the unauthorized use or disclosure, and (v) what corrective action Contractor has taken or shall take to prevent future similar unauthorized use or disclosure. Contractor shall provide such other information, including a written report, as reasonably requested by DEO’s Information Security Manager.

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees a. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. Contractor . b. Grantee must implement procedures to ensure the appropriate protection and confidentiality of all data, files, and records involved with this Contract. Agreement. c. Except as necessary to fulfill the terms of this Contract Agreement and with the written permission of the CustomerDEO, Contractor and Contractor’s employees Grantee shall not divulge to third parties any confidential information obtained by Contractor Grantee or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract Agreement work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the Customer. Contractor and Contractor’s employees agree DEO. d. Grantee shall not to use or disclose any information concerning a recipient of services under the State or the Customer this Agreement for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. If Contractor or Contractor’s employees have . e. When Grantee has access to confidential information DEO’s network and/or applications, in order to fulfill ContractorGrantee’s obligations under this ContractAgreement, Contractor agrees to Grantee shall abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor Grantee (including its employees, subcontractors, agents, or any other individuals to whom Contractor Grantee exposes confidential information obtained under this ContractAgreement), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contract. Contractor Agreement. f. Grantee shall immediately notify the Department and the Customer DEO in writing of any disclosure of unsecured confidential information by Contractorwhen Grantee, its employees, agents agents, or representatives which is not become aware of an inadvertent disclosure of DEO’s unsecured confidential information in compliance with violation of the terms of the Contract (of which it becomes aware)this Agreement. Contractor also Grantee shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents sub-contractors or agents reported to the Contractor by its sub-Grantee. For purposes of this

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the appropriate protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerDEO, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerDEO. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have has access to confidential information either DEO’s network or any DEO applications, or both, in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor (including its employees, subcontractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contractContract. 6. Contractor shall notify the Department and the Customer DEO in writing of any disclosure of unsecured confidential information of DEO by Contractor, its employees, agents agents, or representatives which is not in compliance with the terms of the this Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub-contractors or agents. For purposes of this Contract, “Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of DEO information in Contractor’s possession or electronic interference with DEO operations; however, random attempts at access shall not be considered a security incident. Contractor shall make a report to DEO not more than seven (7) business days after Contractor learns of such use or disclosure. Contractor’s report shall identify, to the extent known: (i) the nature of the unauthorized use or disclosure, (ii) the confidential information used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what Contractor has done or shall do to mitigate any deleterious effect of the unauthorized use or disclosure, and (v) what corrective action Contractor has taken or shall take to prevent future similar unauthorized use or disclosure. Contractor shall provide such other information, including a written report, as reasonably requested by XXX’s Information Security Manager.

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the appropriate protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerCommerce, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerCommerce. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have has access to confidential information either Commerce’s network or any Commerce applications, or both, in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer Commerce Information Technology Security procedures and policies. Contractor (including its employees, subcontractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contractContract. 6. Contractor shall notify the Department and the Customer Commerce in writing of any disclosure of unsecured confidential information of Commerce by Contractor, its employees, agents agents, or representatives which is not in compliance with the terms of the this Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer Commerce any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub-contractors or agents. For purposes of this Contract, “Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of Commerce information in Contractor’s possession or electronic interference with Commerce operations; however, random attempts at access shall not be considered a security incident. Contractor shall make a report to Commerce not more than seven (7) business days after Contractor learns of such use or disclosure. Contractor’s report shall identify, to the extent known: (i) the nature of the unauthorized use or disclosure, (ii) the confidential information used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what Contractor has done or shall do to mitigate any deleterious effect of the unauthorized use or disclosure, and (v) what corrective action Contractor has taken or shall take to prevent future similar unauthorized use or disclosure. Contractor shall provide such other information, including a written report, as reasonably requested by Commerce’s Information Security Manager.

Confidentiality and Safeguarding Information. The Contractor or Contractor’s employees may have access to confidential information. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. The Contractor must implement procedures to ensure the protection and confidentiality of all data, files, and records involved with this Contract. Except as necessary to fulfill the terms of this Contract and with the permission of the Customer, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the Customer. Contractor and Contractor’s employees agree not to use or disclose any information concerning a recipient of services under the State or the Customer for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. If Contractor or Contractor’s employees have access to confidential information in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer Information Technology Security procedures and policies. Contractor (including its employees, subcontractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contract. Contractor shall notify the Department and the Customer in writing of any disclosure of unsecured confidential information by Contractor, its employees, agents or representatives which is are not in compliance with the terms of the Contract (of which it becomes aware). The Contractor also shall report to the Department and the Customer any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the appropriate protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerCOMMERCE, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerCOMMERCE. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have has access to confidential information either Commerce’s network or any Commerce applications, or both, in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer Commerce Information Technology Security procedures and policies. Contractor (including its employees, subcontractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contractContract. 6. Contractor shall notify the Department and the Customer Commerce in writing of any disclosure of unsecured confidential information of Commerce by Contractor, its employees, agents agents, or representatives which is not in compliance with the terms of the this Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer Commerce any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub-contractors or agents. For purposes of this Contract, “Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of Commerce information in Contractor’s possession or electronic interference with Commerce operations; however, random attempts at access shall not be considered a security incident. Contractor shall make a report to Commerce not more than seven (7) business days after Contractor learns of such use or disclosure. Contractor’s report shall identify, to the extent known: (i) the nature of the unauthorized use or disclosure, (ii) the confidential information used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what Contractor has done or shall do to mitigate any deleterious effect of the unauthorized use or disclosure, and

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerDEO, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerDEO. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have has access to confidential information either DEO’s network or any DEO applications, or both, in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor (including its employees, subcontractorssub-contractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contract. 6. Contractor shall notify the Department and the Customer DEO in writing of any disclosure of unsecured confidential information of DEO by Contractor, its employees, agents or representatives which is not in compliance with the terms of the Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub-contractors or agents. For purposes of this Contract, “Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of DEO information in Contractor’s possession or electronic interference with DEO operations; however, random attempts at access shall not be considered a security incident. Contractor shall make a report to DEO not more than seven (7) business days after Contractor learns of such use or disclosure. Contractor’s report shall identify, to the extent known: (i) the nature of the unauthorized use or disclosure, (ii) the confidential information used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what Contractor has done or shall do to mitigate any deleterious effect of the unauthorized use or disclosure, and (v) what corrective action Contractor has taken or shall take to prevent future similar unauthorized use or disclosure. Contractor shall provide such other information, including a written report, as reasonably requested by DEO’s Information Security Manager.

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the appropriate protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerDEO, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerDEO. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have has access to confidential information either DEO’s network or any DEO applications, or both, in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor (including its employees, subcontractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contractContract. 6. Contractor shall notify the Department and the Customer DEO in writing of any disclosure of unsecured confidential information of DEO by Contractor, its employees, agents agents, or representatives which is not in compliance with the terms of the this Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub-contractors or agents. For purposes of this Contract, “Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of DEO information in Contractor’s possession or electronic interference with DEO operations; however, random attempts at access shall not be considered a security incident. Contractor shall make a report to DEO not more than seven (7) business days after Contractor learns of such use or disclosure. Contractor’s report shall identify, to the extent known: (i) the nature of the unauthorized use or disclosure, (ii) the confidential information used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what Contractor has done or shall do to mitigate any deleterious effect of the unauthorized use or disclosure, and (v)

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerDEO, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerDEO. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have has access to confidential information in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor (including its employees, subcontractorssub- contractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contract. 6. Contractor shall notify the Department and the Customer in writing of any disclosure of unsecured confidential information of DEO by Contractor, its employees, agents or representatives which is not in compliance with the terms of the Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub-contractors or agents. For purposes of this

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor Loan Administrator must implement procedures to ensure the protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerDEO, Contractor and Contractor’s employees Loan Administrator shall not divulge to third parties any confidential information obtained by Contractor Loan Administrator or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerDEO. 4. Contractor and Contractor’s employees agree Loan Administrator agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have Loan Administrator has access to confidential information either DEO’s network or any DEO applications, or both, in order to fulfill ContractorLoan Administrator’s obligations under this Contract, Contractor Loan Administrator agrees to abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor Loan Administrator (including its employees, subcontractorssub‐contractors, agents, or any other individuals to whom Contractor Loan Administrator exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contractContract. 6. Contractor Loan Administrator shall notify the Department and the Customer DEO in writing of any disclosure of unsecured confidential information of DEO by ContractorLoan Administrator, its employees, agents agents, or representatives which is not in compliance with the terms of the this Contract (of which it becomes aware). Contractor Loan Administrator also shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents reported to the Contractor Loan Administrator by its sub-sub‐Loan Administrators or agents. For purposes of this Contract, “Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of DEO information in Loan Administrator’s possession or electronic interference with DEO operations; however, random attempts at access shall not be considered a security incident. Loan Administrator shall make a report to DEO not more than seven (7) business days after Loan Administrator learns of such use or disclosure. Loan Administrator’s report shall identify, to the extent known: (i) the nature of the unauthorized use or disclosure, (ii) the confidential information used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what Loan Administrator has done or shall do to

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerDEO, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerDEO. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have has access to confidential information in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor (including its employees, subcontractorssub- contractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contract. 6. Contractor shall notify the Department and the Customer in writing of any disclosure of unsecured confidential information of DEO by Contractor, its employees, agents or representatives which is not in compliance with the terms of the Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub-contractors or agents. For purposes of this Contract,

Confidentiality and Safeguarding Information. Contractor or Contractor’s employees 1. Each Party may have access to confidential informationinformation made available by the other. The provisions of the Florida Public Records Act, Chapter chapter 119, F.S., and other applicable state and federal laws will govern disclosure of any confidential information received by the State of Florida. 2. Contractor must implement procedures to ensure the protection and confidentiality of all data, files, and records involved with this Contract. 3. Except as necessary to fulfill the terms of this Contract and with the permission of the CustomerDEO, Contractor and Contractor’s employees shall not divulge to third parties any confidential information obtained by Contractor or its agents, distributors, resellers, subcontractors, officers, or employees in the course of performing Contract contract work, including, but not limited to, security procedures, business operations information, or commercial proprietary information in the possession of the State or the CustomerDEO. 4. Contractor and Contractor’s employees agree agrees not to use or disclose any information concerning a recipient of services under the State or the Customer this Contract for any purpose not in conformity with state and federal law or regulations except upon written consent of the recipient, or his responsible parent or guardian when authorized by law, if applicable. 5. If Contractor or Contractor’s employees have has access to confidential information either DEO’s network or any DEO applications, or both, in order to fulfill Contractor’s obligations under this Contract, Contractor agrees to abide by all applicable Customer DEO Information Technology Security procedures and policies. Contractor (including its employees, subcontractorssub-contractors, agents, or any other individuals to whom Contractor exposes confidential information obtained under this Contract), shall not store, or allow to be stored, any confidential information on any portable storage media (e.g., laptops, thumb drives, hard drives, etc.) or peripheral device with the capacity to hold information. Failure to strictly comply with this provision shall constitute a breach of contract. 6. Contractor shall notify the Department and the Customer DEO in writing of any disclosure of unsecured confidential information of DEO by Contractor, its employees, agents or representatives which is not in compliance with the terms of the Contract (of which it becomes aware). Contractor also shall report to the Department and the Customer DEO any Security Incidents of which it becomes aware, including those incidents reported to the Contractor by its sub-sub-contractors or agents. For purposes of this Contract, “Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of DEO information in Contractor’s possession or electronic interference with DEO operations; however, random attempts at access shall not be considered a security incident. Contractor shall make a report to DEO not more than seven (7) business days after Contractor learns of such use or disclosure. Contractor’s report shall identify, to the extent known: (i) the nature of the unauthorized use or disclosure, (ii) the confidential information used or disclosed, (iii) who made the