Protection of PII Sample Clauses

Protection of PII. Personally identifiable information (“PII”) shall be defined as information that identifies a Cardholder or identifies a Card, which is disclosed to MasterCard pursuant to this Agreement, along with the Transaction information directly associated with such Cardholder. PII includes, but is not limited to, Cardholder Card information or information that can identify an individual or be used to authenticate an individual. MasterCard will keep and maintain all PII in strict confidence, using such degree of care as is appropriate to avoid unauthorized access, use, or disclosure. MasterCard acknowledges and agrees that its access, use, storage, disposal, or disclosure of PII complies with federal and state privacy and data security laws. MasterCard is responsible for any unauthorized collection, access, use, storage, disposal, or disclosure of PII by its employees, agents, Affiliates or subcontractors.
AutoNDA by SimpleDocs
Protection of PII. The parties agree - PII compiled for purposes of this Data Sharing Agreement will be stored on one or more of the following media and protected as described: 1) Workstation Hard disk drives may have PII stored on local workstation hard disks. Access to the PII will be restricted to authorized users by requiring logon to the local workstation using a unique user ID and complex password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. The hard drive must be encrypted to protect LCCC PII; 2) Network server disks may have PII stored on hard disks mounted on third party network servers and made available through shared folders. Access to the PII will be restricted to authorized users through the use of access control lists which will grant access only after the authorized user has authenticated to the network using a unique user ID and complex password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. PII will be hosted in National Institute of Standards and Technology (“NIST”) NIST 800-53 xxxx://xxxxxxx.xxxx.xxx/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf moderate compliant datacenters. Data is backed up daily to a primary datacenter and mirrored daily to an offsite storage location. All PII at rest will be encrypted using AES 256-bit encryption. PII transmissions are secured using either Transport Layer Security (TLS) or a Secure Sockets Layer (SSL) with up to 128-bit encryption. Designated OSU employees with access to PII have a unique login and password and/or; 3) PII storage on portable devices or media. a) LCCC PII shall not be stored on portable devices or media unless specifically, explicitly authorized in writing by LCCC Agreement Administrator or Technical Administrator. If so authorized, the PII shall be given the following protections: i. Encrypt the PII with a key length of at least 128 bits, ii. Control access to devices with a unique user ID and complex password or stronger authentication method such as a physical token or biometrics, iii. Manually lock devices whenever they are left unattended and set devices to lock automatically after a period of inactivity, if this feature is available. Maximum period of inactivity is 20 minutes and; iv. Physically protect the portable device(s) and/or media by: • Keeping them in locked storage when not in use; • Using check-in/check-out procedures when they are shared; and • Taking...
Protection of PII. We employ the following data security tools to protect Personally Identifiable Information: secure server with Secure Socket Layer (SSL). Unfortunately, even with these measures, we cannot guarantee the security of PII. By using our Website, you acknowledge and agree that we make no such guarantee, and that you use our Website at your own risk.
Protection of PII. Handbook 755.1 shall state (such as in Section 1-5) that all personally identifiable information (PII) will be protected as required under law, government-wide regulations, and government-wide policies.
Protection of PII. The parties agree that PII compiled for purposes of this Data Sharing Agreement will be stored on one or more of the following media and protected as described: Workstation Hard disk drives may have PII stored on local workstation hard disks. Access to the PII will be restricted to authorized users by requiring logon to the local workstation using a unique user ID and complex password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. The hard drive must be encrypted to protect PARTNER PII in the event the device is lost or stolen. Network server disks may have PII stored on hard disks mounted on third party network servers and made available through shared folders. Access to the PII will be restricted to authorized users through the use of access control lists which will grant access only after the authorized user has authenticated to the network using a unique user ID and complex password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. PII will be hosted in SSAE 16 accredited datacenters. Data is backed up daily to a primary datacenter and mirrored in real time to multiple storage locations. All PII at rest will be encrypted using AES 256-bit encryption. PII transmissions are secured using either Transport Layer Security (TLS) or a Secure Sockets Layer (SSL) with up to 128-bit encryption. Designated LCCC employees with access to PII have a unique login and password. PII storage on portable devices or media. PARTNER PII shall not be stored on portable devices or media unless specifically, explicitly authorized in writing by THE PARTNER Agreement Administrator or Technical Administrator. If so authorized, the PII shall be given the following protections: Encrypt the PII with a key length of at least 128 bits. Control access to devices with a unique user ID and complex password or stronger authentication method such as a physical token or biometrics. Manually lock devices whenever they are left unattended and set devices to lock automatically after a period of inactivity, if this feature is available. Maximum period of inactivity is 20 minutes. Physically protect the portable device(s) and/or media by: Keeping them in locked storage when not in use; Using check-in/check-out procedures when they are shared; and Taking frequent inventories. When being transported outside of a secure area, portable devices and media with confidential PII m...

Related to Protection of PII

  • Protection of PFPC PFPC shall be indemnified by the Fund and without liability for any action PFPC takes or does not take in reliance upon directions or advice or Oral Instructions or Written Instructions PFPC receives from or on behalf of the Fund or from counsel and which PFPC believes, in good faith, to be consistent with those directions or advice and Oral Instructions or Written Instructions. Nothing in this section shall be construed so as to impose an obligation upon PFPC (i) to seek such directions or advice or Oral Instructions or Written Instructions, or (ii) to act in accordance with such directions or advice or Oral Instructions or Written Instructions.

  • Protection of PFPC Trust PFPC Trust shall be indemnified by the Fund and without liability for any action PFPC Trust takes or does not take in reliance upon directions or advice or Oral Instructions or Written Instructions PFPC Trust receives from or on behalf of the Fund or from counsel and which PFPC Trust believes, in good faith, to be consistent with those directions or advice or Oral Instructions or Written Instructions. Nothing in this section shall be construed so as to impose an obligation upon PFPC Trust (i) to seek such directions or advice or Oral Instructions or Written Instructions, or (ii) to act in accordance with such directions or advice or Oral Instructions or Written Instructions.

  • Protection of Personal Data 25.1 The Parties agree that they may obtain and have access to personal data for the duration of the Agreement for the fulfilment of the rights and obligations contained herein. In performing the obligations as set out in this Agreement, the Parties shall at all times ensure that: a) they process data only for the express purpose for which it was obtained; b) once processed for the purposes for which it was obtained, all data will be destroyed to an extent that it cannot be reconstructed to its original form; c) data is provided only to authorised personnel who strictly require the personal data to carry out the Parties’ respective obligations under this Agreement; d) they do not disclose personal data of the other Party, other than in terms of this Agreement; e) they have all reasonable technical and organisational measures in place to protect all personal data from unauthorised access and/or use; f) they have appropriate technical and organisational measures in place to safeguard the security, integrity and authenticity of all data in its possession or under its control in terms of this Agreement; g) such personal data is protected against unauthorised or unlawful processing, accidental loss, destruction or damage, alteration, disclosure or access. 25.2 The Parties agree that if personal data will be processed for additional purposes beyond the original purpose for which it was obtained, explicit consent must be obtained beforehand from those persons whose information will be subject to further processing. 25.3 Should it be necessary for either Party to disclose or otherwise make available the personal data to any third party (including sub-contractors and employees), it may do so only with the prior written permission of the other Party. The Party requiring such permission shall require of all such third parties, appropriate written undertakings to be provided, containing similar terms to that set forth in this clause 25, and dealing with that third party's obligations in respect of its processing of the personal data. Following approval by the other Party, the Party requiring permission agrees that the provisions of this clause 25 shall mutatis mutandis apply to all authorised third parties who process personal data. 25.4 The Parties shall ensure that any persons authorized to process data on their behalf (including employees and third parties) will safeguard the security, integrity and authenticity of all data. Where necessary to meet this requirement, the Parties shall keep all personal data and any analyses, profiles, or documents derived therefrom logically separated from all other data and documentation held by it. 25.5 The Parties shall carry out regular assessments to identify all reasonably foreseeable internal and external risks to the personal data in its possession or under its control. The Parties shall implement and maintain appropriate safeguards against the risks which it identifies and shall also regularly verify that the safeguards which it has in place has been effectively implemented. 25.6 The Parties agree that they will promptly return or destroy any personal data in their possession or control which belongs to the other Party once it no longer serves the purpose for which it was collected in relation to this Agreement, subject to any legal retention requirements. This may be at the request of the other Party and includes circumstances where a person has requested the Parties to delete all instances of their personal data. The information will be destroyed in such a manner that it cannot be reconstructed to its original form, linking it to any particular individual or organisation.

  • Protection of Private Information If this Agreement requires City to disclose “Private Information” to Contractor within the meaning of San Francisco Administrative Code Chapter 12M, Contractor and subcontractor shall use such information only in accordance with the restrictions stated in Chapter 12M and in this Agreement and only as necessary in performing the Services. Contractor is subject to the enforcement and penalty provisions in Chapter 12M.

  • PROTECTION OF TEACHERS A. The Board recognizes its responsibility to give reasonable support and assistance to Teachers for the maintenance of control and discipline in the classroom. Each Teacher, however, bears the primary responsibility for maintaining proper control and discipline in the classroom. B. As permitted by Section 1309 of the Revised School Code, a Teacher may temporarily exclude a student from one (1) class when the nature of the offense, the persistence of the misbehavior, or the disruptive effect of the violation makes the continued presence of the student in the classroom intolerable. In such cases, the Teacher will furnish the Principal with written particulars of the incident as promptly as teaching obligations allow. Upon request of the Principal, the Teacher shall notify the student’s parent of the nature of the offense. If the Principal determines the need for a meeting with the student’s parent, the Teacher shall attend that meeting. C. The Teachers recognize that all disciplinary actions and methods invoked by them shall be reasonable and just. D. Any assault or threatened assault upon a Teacher, resulting from his/her position as a Teacher, shall be promptly reported to the Building Principal by the Teacher or representative. The Board shall provide legal counsel, if requested in writing by the Teacher, to advise the Teacher of the Teacher’s rights and obligations as to such assault. The Board will provide reasonable assistance to the Teacher in working with law enforcement and judicial authorities, unless such counsel and assistance are provided through the Association. E. If a Teacher is complained against or sued as a result of any reasonable action as defined by a court of law and taken by the Teacher while in the scope of his/her employment with the District, the Board shall provide legal counsel and render all reasonable assistance, as appropriate, to the Teacher in his/her defense when requested in writing by the Teacher. This section shall only require the provision of legal counsel and shall not be interpreted to interfere with the Board’s right to exercise supervision and control, including discharge of the Teacher. If a final decision issued by a court or administrative agency indicates the Teacher’s liability for this action, all costs of assistance rendered by the District to the Teacher pursuant to this paragraph and not covered by the District’s insurance carrier, shall be reimbursed by the Teacher. F. Except for disciplinary suspension or discharge, or for incarceration, any work time lost by a Teacher in connection with an incident identified in Article 9.D, not compensable under Workers’ Compensation, shall not be charged against the Teacher, unless the Teacher is adjudged liable by an agency or court of competent jurisdiction. When Workers’ Compensation is paid, the Board shall pay the difference between that sum and the Teacher’s regular salary, but not to exceed the current year’s contract. No deduction of leave shall be made under these circumstances. G. In case of an assault by a student(s) on a Teacher acting in the line of duty, or other action taken by or against a Teacher in the line of duty, causing damage to the Teacher’s personal property, including clothing, the Board shall make an equitable financial settlement for such loss with the Teacher involved. H. Any complaint directed toward a Teacher shall be promptly called to the Teacher’s attention unless otherwise prohibited by law. This requirement shall not prevent the Supervisor from screening out xxxxx gripes. I. Teachers shall be expected to exercise reasonable care as to the safety of students and property.

  • Freedom of Information and Protection of Privacy Act Any information provided on this contract may be subject to release under the Freedom of Information and Protection of Privacy Act. The Contractor may be consulted prior to release of any information.

  • Protection of Personal Information Party agrees to comply with all applicable state and federal statutes to assure protection and security of personal information, or of any personally identifiable information (PII), including the Security Breach Notice Act, 9 V.S.A. § 2435, the Social Security Number Protection Act, 9 V.S.A. § 2440, the Document Safe Destruction Act, 9 V.S.A. § 2445 and 45 CFR 155.260. As used here, PII shall include any information, in any medium, including electronic, which can be used to distinguish or trace an individual’s identity, such as his/her name, social security number, biometric records, etc., either alone or when combined with any other personal or identifiable information that is linked or linkable to a specific person, such as date and place or birth, mother’s maiden name, etc.

  • Protection of Trade Secrets The Executive agrees to maintain in strict confidence and, except as necessary to perform his duties for the Employer, the Executive agrees not to use or disclose any Trade Secrets of the Employer during or after his employment. “Trade Secret” means information, including a formula, pattern, compilation, program, device, method, technique, process, drawing, cost data or customer list, that: (i) derives economic value, actual or potential, from not being generally known to, and not being readily ascertainable by proper means by, other persons who can obtain economic value from its disclosure or use; and (ii) is the subject of efforts that are reasonable under the circumstances to maintain its secrecy.

  • Protection of Rights Licensee shall not copy, translate, disassemble, decompile, nor reverse engineer the Software or other SAP Materials. Licensee shall not create or attempt to create the source code from the object code of the Software or other SAP Materials. Licensee is permitted to back up data in accordance with good information technology practice and for this purpose to create the necessary backup copies of the Software. Backup copies on transportable discs or other data media must be marked as backup copies and bear the same copyright and authorship notice as the original discs or other data media, unless technically infeasible. Licensee must not change or remove SAP’s copyright and authorship notices.

  • Protection of Data The Contractor agrees to store Data on one or more of the following media and protect the Data as described: a. Hard disk drives. For Data stored on local workstation hard disks, access to the Data will be restricted to Authorized User(s) by requiring logon to the local workstation using a Unique User ID and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. b. Network server disks. For Data stored on hard disks mounted on network servers and made available through shared folders, access to the Data will be restricted to Authorized Users through the use of access control lists which will grant access only after the Authorized User has authenticated to the network using a Unique User ID and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. Data on disks mounted to such servers must be located in an area which is accessible only to authorized personnel, with access controlled through use of a key, card key, combination lock, or comparable mechanism. For DSHS Confidential Information stored on these disks, deleting unneeded Data is sufficient as long as the disks remain in a Secure Area and otherwise meet the requirements listed in the above paragraph. Destruction of the Data, as outlined below in Section 8 Data Disposition, may be deferred until the disks are retired, replaced, or otherwise taken out of the Secure Area. c. Optical discs (CDs or DVDs) in local workstation optical disc drives. Data provided by DSHS on optical discs which will be used in local workstation optical disc drives and which will not be transported out of a Secure Area. When not in use for the contracted purpose, such discs must be Stored in a Secure Area. Workstations which access DSHS Data on optical discs must be located in an area which is accessible only to authorized personnel, with access controlled through use of a key, card key, combination lock, or comparable mechanism. d. Optical discs (CDs or DVDs) in drives or jukeboxes attached to servers. Data provided by DSHS on optical discs which will be attached to network servers and which will not be transported out of a Secure Area. Access to Data on these discs will be restricted to Authorized Users through the use of access control lists which will grant access only after the Authorized User has authenticated to the network using a Unique User ID and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. Data on discs attached to such servers must be located in an area which is accessible only to authorized personnel, with access controlled through use of a key, card key, combination lock, or comparable mechanism.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!