Common use of PROTECTION OF PERSONALLY IDENTIFIABLE INFORMATION (PII)‌ Clause in Contracts

PROTECTION OF PERSONALLY IDENTIFIABLE INFORMATION (PII)‌. In performing this contract the Contractor may be provided with Personally Identifiable Information (PII) relating to Sandia employees, contractor employees, and any other individuals related to the work under this contract. The Contractor agrees that the Contractor will take all reasonable steps and precautions to ensure this provided PII is adequately controlled, protected and only used to perform work called for under this contract. For the purposes of this agreement PII is defined as: Any of the information listed below that can be used to distinguish or trace an individual's identity, is collected and maintained for the purpose of conducting official Sandia business, and is not solely comprised of information that is available to the general public: social security number, driver's license number, passport number, other federal- or state-issued identification card number, bank account number (with or without routing number, access code, or Personal Identification Number [PIN]), financial or benefit account number in combination with any required code permitting access, background information or verification reports or credit report, including consumer reports, medical or health information, including biometric, biomonitoring, or genetic information, employment history including ratings, salary, wage, deduction information, and disciplinary actions, security clearance history or related information, criminal history, date of birth or age, place of birth, mother’s maiden name, race or ethnicity. Notes: One means of distinguishing or tracing an individual’s identity is to include the first name or the first initial and last name of an individual in combination with any information listed above. PII does not include information that is on Sandia computing resources as a result of incidental personal use of computing and information resources or other assets. Loss of Control of PII: If the Contractor becomes aware or suspects that any Sandia provided Personally identifiable Information, has been inappropriately, taken, used, disclosed, and/or released or that the controls for access to the information have been compromised, the Contractor will immediately take steps to prohibit further disclosure and will give verbal notice to Xxxxxx’s Security Incident Management Program (SIMP) by calling and reporting the incident at either at (000) 000-0000 or for contracts issued in California call 0-000-000-0000 ( these are manned 7 days a week 24 hours a day). After notifying SIMP, also verbally notify the SCR and SDR (if one is identified in this contract). In addition to the immediate verbal notifications, written notification will be provided to the SCR and SDR (if one is identified in the contract,) within 72 hours of the Contractor’s learning of the situation. The Contractor will cooperate with Sandia and provide information needed to allow Sandia to evaluate the nature and extent of the release or loss of control. The provisions of this clause shall survive and continue in force following the completion of work under this agreement until such time that any provided PII is either destroyed in its entirety in a manner that ensures it is not readable or decipherable through any means, or that the information including all copies is returned to Sandia. The contractor shall ensure that these provisions shall be made applicable to any subcontractor or non-governmental third party who receives PII provided through this agreement. TAXES‌ For many purchases, Sandia can provide Transaction Exemption Certificates for both New Mexico and California, and certificates for other states may also be available. Direct any request for Transaction Exception Certificates to xxxxx@xxxxxx.xxx. FAR 52.229-10 State of New Mexico Gross Receipts and Compensating Tax as modified by DEAR 970.2904-1 (a) is applicable in New Mexico. Sandia holds California Contractor's Permit Number OH-98033576. Purchases made under this contract are exempt from California Sales and Use Taxes if performance occurs in California. Prices include all applicable federal taxes. TRANSPORTATION‌

PROTECTION OF PERSONALLY IDENTIFIABLE INFORMATION (PII)‌. In performing this contract the Contractor may be provided with Personally Identifiable Information (PII) relating to Sandia employees, contractor employees, and any other individuals related to the work under this contract. The Contractor agrees that the Contractor will shall take all reasonable steps and precautions to ensure this provided PII is adequately controlled, protected protected, and only used to perform work called for under this contract. For the purposes of this agreement PII is defined as: Any of the information listed below that can be used to distinguish or trace an individual's identity, is collected and maintained for the purpose of conducting official Sandia business, and is not solely comprised of information that is available to the general public: social security number, driver's license number, passport number, other federal- or state-issued identification card number, bank account number (with or without routing number, access code, or Personal Identification Number [PIN]), financial or benefit account number in combination with any required code permitting access, background information or verification reports or credit report, including consumer reports, medical or health information, including biometric, biomonitoringbio monitoring, or genetic information, employment history including ratings, salary, wage, deduction information, and disciplinary actions, security clearance history or related information, criminal history, date of birth or age, place of birth, mother’s maiden name, race or ethnicity. Notes: One means of distinguishing or tracing an individual’s identity is to include the first name or the first initial and last name of an individual in combination with any information listed above. PII does not include information that is on Sandia computing resources as a result of incidental personal use of computing and information resources or other assets. Loss of Control of PII: If the Contractor becomes aware or suspects that any Sandia provided Personally identifiable Information, has been inappropriately, taken, used, disclosed, and/or released or that the controls for access to the information have been compromised, the Contractor will shall immediately take steps to prohibit further disclosure and will shall give verbal notice to Xxxxxx’s Security Incident Management Program (SIMP) by calling and reporting the incident at either at (000) 000SNL/NM: 505-0000 238- 7467 or for contracts issued in California call 0-SNL/CA: 000-000-0000 ( these are manned 7 days a week 24 hours a day). After notifying SIMP, also verbally notify the SCR and SDR (if one is identified in this contract). In addition to the immediate verbal notifications, written notification will shall be provided to the SCR and SDR (if one is identified in the contract,) within 72 hours of the Contractor’s learning of the situation. The Contractor will shall cooperate with Sandia and provide information needed to allow Sandia to evaluate the nature and extent of the release or loss of control. The provisions of this clause shall survive and continue in force following the completion of work under this agreement until such time that any provided PII is either destroyed in its entirety in a manner that ensures it is not readable or decipherable through any means, or that the information including all copies is returned to Sandia. The contractor shall ensure that these provisions shall be made applicable to any subcontractor or non-governmental third party who receives PII provided through this agreement. TAXES‌ For many purchases, Sandia can provide Transaction Exemption Certificates for both New Mexico and California, and certificates for other states may also be available. Direct any request for Transaction Exception Certificates to xxxxx@xxxxxx.xxx. FAR 52.229-10 State of New Mexico Gross Receipts and Compensating Tax as modified by DEAR 970.2904-1 (a) is applicable in New Mexico. Sandia holds California Contractor's Permit Number OH-98033576. Purchases made under this contract are exempt from California Sales and Use Taxes if performance occurs in California. Prices include all applicable federal taxes. TRANSPORTATION‌

PROTECTION OF PERSONALLY IDENTIFIABLE INFORMATION (PII)‌. In performing this contract the Contractor may be provided with Personally Identifiable Information (PII) relating to Sandia employees, contractor employees, and any other individuals related to the work under this contract. The Contractor agrees that the Contractor will take all reasonable steps and precautions to ensure this provided PII is adequately controlled, protected protected, and only used to perform work called for under this contract. For the purposes of this agreement PII is defined as: Any of the information listed below that can be used to distinguish or trace an individual's identity, is collected and maintained for the purpose of conducting official Sandia business, and is not solely comprised of information that is available to the general public: social security number, driver's license number, passport number, other federal- or state-issued identification card number, bank account number (with or without routing number, access code, or Personal Identification Number [PIN]), financial or benefit account number in combination with any required code permitting access, background information or verification reports or credit report, including consumer reports, medical or health information, including biometric, biomonitoringbio monitoring, or genetic information, employment history including ratings, salary, wage, deduction information, and disciplinary actions, security clearance history or related information, criminal history, date of birth or age, place of birth, mother’s maiden name, race or ethnicity. Notes: One means of distinguishing or tracing an individual’s identity is to include the first name or the first initial and last name of an individual in combination with any information listed above. PII does not include information that is on Sandia computing resources as a result of incidental personal use of computing and information resources or other assets. Loss of Control of PII: If the Contractor becomes aware or suspects that any Sandia provided Personally identifiable Information, has been inappropriately, taken, used, disclosed, and/or released or that the controls for access to the information have been compromised, the Contractor will immediately take steps to prohibit further disclosure and will give verbal notice to Xxxxxx’s Security Incident Management Program (SIMP) by calling and reporting the incident at either at (SNL/NM pager: 000) -000-0000 (283-SIMP) or for contracts issued in California call 0SNL/CA: 925-000-000-0000 294- 3238 ( these are manned 7 days a week 24 hours a day). After notifying SIMP, also verbally notify the SCR and SDR (if one is identified in this contract). In addition to the immediate verbal notifications, written notification will be provided to the SCR and SDR (if one is identified in the contract,) within 72 hours of the Contractor’s learning of the situation. The Contractor will cooperate with Sandia and provide information needed to allow Sandia to evaluate the nature and extent of the release or loss of control. The provisions of this clause shall survive and continue in force following the completion of work under this agreement until such time that any provided PII is either destroyed in its entirety in a manner that ensures it is not readable or decipherable through any means, or that the information including all copies is returned to Sandia. The contractor shall ensure that these provisions shall be made applicable to any subcontractor or non-governmental third party who receives PII provided through this agreement. TAXES‌ For many purchases, Sandia can provide Transaction Exemption Certificates for both New Mexico and California, and certificates for other states may also be available. Direct any request for Transaction Exception Certificates to xxxxx@xxxxxx.xxx. FAR 52.229-10 State of New Mexico Gross Receipts and Compensating Tax as modified by DEAR 970.2904-1 (a) is applicable in New Mexico. Sandia holds California Contractor's Permit Number OH-98033576. Purchases made under this contract are exempt from California Sales and Use Taxes if performance occurs in California. Prices include all applicable federal taxes. TRANSPORTATION‌.

PROTECTION OF PERSONALLY IDENTIFIABLE INFORMATION (PII)‌. In performing this contract the Contractor may be provided with Personally Identifiable Information (PII) relating to Sandia employees, contractor employees, and any other individuals related to the work under this contract. The Contractor agrees that the Contractor will shall take all reasonable steps and precautions to ensure this provided PII is adequately controlled, protected protected, and only used to perform work called for under this contract. For the purposes of this agreement PII is defined as: Any of the information listed below that can be used to distinguish or trace an individual's identity, is collected and maintained for the purpose of conducting official Sandia business, and is not solely comprised of information that is available to the general public: social security number, driver's license number, passport number, other federal- or state-issued identification card number, bank account number (with or without routing number, access code, or Personal Identification Number [PIN]), financial or benefit account number in combination with any required code permitting access, background information or verification reports or credit report, including consumer reports, medical or health information, including biometric, biomonitoringbio monitoring, or genetic information, employment history including ratings, salary, wage, deduction information, and disciplinary actions, security clearance history or related information, criminal history, date of birth or age, place of birth, mother’s maiden name, race or ethnicity. Notes: One means of distinguishing or tracing an individual’s identity is to include the first name or the first initial and last name of an individual in combination with any information listed above. PII does not include information that is on Sandia computing resources as a result of incidental personal use of computing and information resources or other assets. Loss of Control of PII: If the Contractor becomes aware or suspects that any Sandia provided Personally identifiable Information, has been inappropriately, taken, used, disclosed, and/or released or that the controls for access to the information have been compromised, the Contractor will shall immediately take steps to prohibit further disclosure and will shall give verbal notice to Xxxxxx’s Security Incident Management Program (SIMP) by calling and reporting the incident at either at (SNL/NM pager: 000) -000-0000 (283-SIMP) or for contracts issued in California call 0SNL/CA: 925-000-000-0000 294- 3238 ( these are manned 7 days a week 24 hours a day). After notifying SIMP, also verbally notify the SCR and SDR (if one is identified in this contract). In addition to the immediate verbal notifications, written notification will shall be provided to the SCR and SDR (if one is identified in the contract,) within 72 hours of the Contractor’s learning of the situation. The Contractor will shall cooperate with Sandia and provide information needed to allow Sandia to evaluate the nature and extent of the release or loss of control. The provisions of this clause shall survive and continue in force following the completion of work under this agreement until such time that any provided PII is either destroyed in its entirety in a manner that ensures it is not readable or decipherable through any means, or that the information including all copies is returned to Sandia. The contractor shall ensure that these provisions shall be made applicable to any subcontractor or non-governmental third party who receives PII provided through this agreement. TAXES‌ For many purchases, Sandia can provide Transaction Exemption Certificates for both New Mexico and California, and certificates for other states may also be available. Direct any request for Transaction Exception Certificates to xxxxx@xxxxxx.xxx. FAR 52.229-10 State of New Mexico Gross Receipts and Compensating Tax as modified by DEAR 970.2904-1 (a) is applicable in New Mexico. Sandia holds California Contractor's Permit Number OH-98033576. Purchases made under this contract are exempt from California Sales and Use Taxes if performance occurs in California. Prices include all applicable federal taxes. TRANSPORTATION‌

PROTECTION OF PERSONALLY IDENTIFIABLE INFORMATION (PII)‌. In performing this contract the Contractor may be provided with Personally Identifiable Information (PII) relating to Sandia employees, contractor employees, and any other individuals related to the work under this contract. The Contractor agrees that the Contractor will take all reasonable steps and precautions to ensure this provided PII is adequately controlled, protected and only used to perform work called for under this contract. For the purposes of this agreement PII is defined as: Any of the information listed below that can be used to distinguish or trace an individual's identity, is collected and maintained for the purpose of conducting official Sandia business, and is not solely comprised of information that is available to the general public: social security number, driver's license number, passport number, other federal- or state-issued identification card number, bank account number (with or without routing number, access code, or Personal Identification Number [PIN]), financial or benefit account number in combination with any required code permitting access, background information or verification reports or credit report, including consumer reports, medical or health information, including biometric, biomonitoring, or genetic information, employment history including ratings, salary, wage, deduction information, and disciplinary actions, security clearance history or related information, criminal history, date of birth or age, place of birth, mother’s maiden name, race or ethnicity. Notes: One means of distinguishing or tracing an individual’s identity is to include the first name or the first initial and last name of an individual in combination with any information listed above. PII does not include information that is on Sandia computing resources as a result of incidental personal use of computing and information resources or other assets. Loss of Control of PII: If the Contractor becomes aware or suspects that any Sandia provided Personally identifiable Information, has been inappropriately, taken, used, disclosed, and/or released or that the controls for access to the information have been compromised, the Contractor will immediately take steps to prohibit further disclosure and will give verbal notice to Xxxxxx’s Security Incident Management Program (SIMP) by calling and reporting the incident at either at (000) 000-0000 or for contracts issued in California call 0-000-000-0000 ( these are manned 7 days a week 24 hours a day). After notifying SIMP, also verbally notify the SCR and SDR (if one is identified in this contract). In addition to the immediate verbal notifications, written notification will be provided to the SCR and SDR (if one is identified in the contract,) within 72 hours of the Contractor’s learning of the situation. The Contractor will cooperate with Sandia and provide information needed to allow Sandia to evaluate the nature and extent of the release or loss of control. The provisions of this clause shall survive and continue in force following the completion of work under this agreement until such time that any provided PII is either destroyed in its entirety in a manner that ensures it is not readable or decipherable through any means, or that the information including all copies is returned to Sandia. The contractor shall ensure that these provisions shall be made applicable to any subcontractor or non-non- governmental third party who receives PII provided through this agreement. TAXES‌ For many purchases, Sandia can provide Transaction Exemption Certificates for both New Mexico and California, and certificates for other states may also be available. Direct any request for Transaction Exception Certificates to xxxxx@xxxxxx.xxx. FAR 52.229-10 State of New Mexico Gross Receipts and Compensating Tax as modified by DEAR 970.2904-1 (a) is applicable in New Mexico. Sandia holds California Contractor's Permit Number OH-98033576. Purchases made under this contract are exempt from California Sales and Use Taxes if performance occurs in California. Prices include all applicable federal taxes. TRANSPORTATION‌NI26 -TAXES