2026_46_Attachment_E_Data_Privacy.docx

This is a Data Privacy Attachment document for professional services related to the City of Minneapolis's RFP for IT Utility Network Enterprise Deployment, which involves the migration of ESRI applications used by the Surface Water and Sewer and Water Distribution groups to ESRI's Utility Network architecture. The attachment establishes mandatory data privacy requirements that all consultants must address as part of their proposals. Consultants are required to provide comprehensive responses to six specific questions regarding data handling, storage, access restrictions, and third-party data sharing practices. The document requires detailed descriptions of how City-created or associated data will be stored and access controlled, all purposes for which data will be used beyond project implementation, any third-party access arrangements, security assessments performed, approval processes for third-party data sharing, and procedures for data return or destruction within ninety days of service completion.

This attachment serves as a critical evaluation and compliance document rather than a standalone contract specification. Prospective consultants must complete all six questions in the Response column to demonstrate their data privacy practices and capabilities. The requirement emphasizes the City's commitment to data security and protection oversight, with particular focus on controlling external data access and ensuring timely data destruction post-project. No pricing, set-asides, or contract term information is provided in this attachment, as it functions as a supplementary requirements document within the broader RFP process.