Electronic Protected Purchasing Entity Information. The Purchasing Entity maintains electronic Protected Purchasing Entity Information under information security policies which include certain physical security measures when such data is removed from the premises or the Purchasing Entity’s control. If Provider removes any electronic Protected Purchasing Entity Information for processing, storage, testing or other purposes under a Contract, Provider shall take reasonable security measures designed to maintain control over such data and to prevent any unauthorized person from accessing or taking the data or copies thereof. Reasonable steps for the security of electronic Protected Purchasing Entity Information include using administrative password controls for access to such data and taking steps to secure the data at least equivalent to the steps Provider takes to secure its own non-public data or to security measures set forth in any information security policy provided by the Purchasing Entity.
Electronic Protected Purchasing Entity Information. The Purchasing Entity maintains electronic Protected Purchasing Entity Information under information security policies which include certain physical security measures when such data is removed from the premises or the Purchasing Entity’s control. For that reason, all tests and use of electronic Protected Purchasing Entity Information must be performed using the Purchasing Entity Network and Purchasing Entity processes whenever possible. If Provider removes any electronic Protected Purchasing Entity Information for processing, storage, testing or other purposes under a Contract, Provider shall take reasonable security measures to maintain control over such data and to prevent any unauthorized person from accessing or taking the data or copies thereof. Reasonable steps for the security of electronic Protected Purchasing Entity Information include using administrative password controls for access to such data and taking steps to secure the data at least equivalent to the steps Provider takes to secure its own non-public data or to security measures set forth in any information security policy provided by the Purchasing Entity.
