09-09-22 - Laserfiche WebLink

Browse Search

DocuSign Envelope ID: 348BB866-CFC7-422D-BFB7-863533B13759 Attachment G GLO Contract No. 22-119-004-D374 Page 2 of 4 2.5. With the exception of contractors and subcontractors as they are addressed in Section 2.4, Subrecipient will not share GLO Data with any third parties, except as necessary for Subrecipient's performance under the Contract and upon the express written consent of the GLO's Information Security Officer or his/her authorized designee. 2.6. Subrecipient will ensure that initial privacy and security training, and annual training, thereafter, is completed by its employees or contractor/subcontractors that have access to GLO Data or who create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle PII and/or SPI on behalf of the GLO. Subrecipient shall maintain and, upon request, provide documentation of training completion. 2.7 Any GLO Data maintained or stored by Subrecipient or any contractor/subcontractor must be stored on servers or other hardware located within the physical borders of the United States and shall not be accessed outside of the United States. 2.8 Subrecipient shall require that all individuals allowed to access GLO Data pursuant to this Contract sign a confidentiality and non -disclosure agreement ("NDA') before being given access to GLO Data. At a minimum, the NDA shall inform all individuals of the confidential nature of the GLO Data, the security and non -disclosure requirements of this Contract, and the potential criminal penalties and civil remedies specified in federal and state laws that may result from the unauthorized disclosure of GLO Data. The NDA shall require all individuals to acknowledge that the GLO or the United States government, including the U.S. Department of Housing and Urban Development, will seek any remedy available, including all administrative, disciplinary, civil, or criminal action(s) or penalties, as appropriate, for any unauthorized disclosure of GLO Data. Subrecipient shall provide the GLO copies of any and all NDAs upon request or demand by the GLO. 2.9 Subrecipient shall only use GLO Data for the purposes of administering the Project(s) 3. Data Ownership 3.1. The GLO shall retain full ownership of all GLO Data, which includes PII and/or SPI, disclosed to Subrecipient or to which Subrecipient otherwise gains access by operation of the Contract or any agreement related thereto. 3.2. If, at any time during the term of the Contract or upon termination of the Contract, whichever occurs first, any part of the GLO Data, in any form, provided to Subrecipient ceases to be necessary for Subrecipient's performance under the Contract, Subrecipient shall within fourteen (14) days thereafter securely return such GLO Data to the GLO, or, at the GLO's written request, destroy, uninstall, and/or remove all copies of data in Subrecipient's possession or control and certify to the GLO that such tasks have been completed. Subrecipient shall provide certification of such destruction of GLO Data. If such return is infeasible, as mutually determined by the GLO and Subrecipient, the obligations set forth in this Attachment, with respect to GLO Data, shall survive termination of the Contract and Subrecipient shall prohibit any further use and disclosure of GLO Data.