Common use of Identity Theft Clause in Contracts

Identity Theft. [In the performance of this Contract, Contractor may have possession or access to documents, records or items that contain “Personal Information” / In order to perform Services under this Contract, Contractor is licensing “Personal Information” from Agency,] as that term is used in ORS 646A.602(11). Personal Information is a type of Confidential Information that is highly sensitive and subject to additional protection. Prior to the receipt of, and during the period in which Contractor has possession of or access to, any Personal Information, Contractor shall have and maintain a formal written information security program that provides safeguards to protect Personal Information from loss, theft, and disclosure to unauthorized persons, as required by the Oregon Consumer Identity Theft Protection Act, ORS 646A.600-646A.628. In addition to and without limiting the generality of Sections 9.1 and 9.2, Contractor shall not breach or permit breach of the security of any Personal Information that is contained in any document, record, compilation of information or other item to which Contractor receives access, possession, custody or control under this Contract. Contractor shall not disclose, or otherwise permit access of any nature, to any unauthorized person, of any such Personal Information. Contractor shall not use, distribute or dispose of any Personal Information other than expressly permitted by Agency, required by applicable law, or required by an order of a tribunal having competent jurisdiction. Contractor shall promptly report to the Agency any breach of security, use, disclosure, theft, loss, or other unauthorized access of any document, record, compilation of information or other item that contains Personal Information to which the Contractor receives access, possession, custody or control in the performance of this Contract. Contractor shall require the compliance of its employees, agents, and subcontractors with this Section 9.3.

Identity Theft. [In the performance of this Contract, Contractor may have possession or access to documents, records or items that contain “Personal Information” / In order to perform Services under this Contract, Contractor is licensing “Personal Information” from Agency,] , as that term is used in ORS 646A.602(11). Personal Information is a type of Confidential Information that is highly sensitive and subject to additional protection. Prior to the receipt of, and during the period in which Contractor has possession of or access to, any Personal Information, Contractor shall have and maintain a formal written information security program that provides safeguards to protect Personal Information from loss, theft, and disclosure to unauthorized persons, as required by the Oregon Consumer Identity Theft Protection Act, ORS 646A.600-646A.628. 10.3.1. In addition to and without limiting the generality of Sections 9.1 10.1 and 9.210.2, Contractor shall not breach or permit breach of the security of any Personal Information that is contained in any document, record, compilation of information or other item to which Contractor receives access, possession, custody or control under this Contract. Contractor shall not disclose, or otherwise permit access of any nature, to any unauthorized person, of any such Personal Information. Contractor shall not use, distribute or dispose of any Personal Information other than expressly permitted by Agency, required by applicable law, or required by an order of a tribunal having competent jurisdiction. 10.3.2. Contractor shall promptly report to the Agency any breach of security, use, disclosure, theft, loss, or other unauthorized access of any document, record, compilation of information or other item that contains Personal Information or any breach or potential breach of security relating to the System to which the Contractor receives access, possession, custody or control in the performance of this Contract. 10.3.3. Contractor shall require the compliance of its employees, agents, and subcontractors with this Section 9.310.3.

Identity Theft. [In the performance of this Contract, Contractor may have possession or access to documents, records or items that contain “Personal Information” / In order to perform Services under this Contract, Contractor is licensing “Personal Information” from Agency,] , as that term is used in ORS 646A.602(11). Personal Information is a type of Confidential Information that is highly sensitive and subject to additional protection. Prior to the receipt of, and during the period in which Contractor has possession of or access to, any Personal Information, Contractor shall have and maintain a formal written information security program that provides safeguards to protect Personal Information from loss, theft, and disclosure to unauthorized persons, as required by the Oregon Consumer Identity Theft Protection Act, ORS 646A.600-646A.628. 9.3.1. In addition to and without limiting the generality of Sections 9.1 and 9.2, Contractor shall not breach or permit breach of the security of any Personal Information that is contained in any document, record, compilation of information or other item to which Contractor receives access, possession, custody or control under this Contract. Contractor shall not disclose, or otherwise permit access of any nature, to any unauthorized person, of any such Personal Information. Contractor shall not use, distribute or dispose of any Personal Information other than expressly permitted by Agency, required by applicable law, or required by an order of a tribunal having competent jurisdiction. 9.3.2. Contractor shall promptly report to the Agency any breach of security, use, disclosure, theft, loss, or other unauthorized access of any document, record, compilation of information or other item that contains Personal Information to which the Contractor receives access, possession, custody or control in the performance of this Contract. 9.3.3. Contractor shall require the compliance of its employees, agents, and subcontractors with this Section 9.3.