AddenumAttachmentNo4.pdf

PDF 44 KB Posted

Attached to
RFQ/P Dental Insurance Services
Solicitation number
S162324-vCurrent
Issued by
Middlesex County, Norfolk County, Suffolk County, Quincy City, Boston City, Massachusetts

About this file

This document is an addendum to a contract for professional or technical services between the Consultant and the Authority. The addendum outlines the Consultant's responsibilities regarding the privacy of personal data and information, including ensuring the security, confidentiality and integrity of personal and other Authority data and personal information; implementing and maintaining reasonable security procedures and practices; protecting personal data and personal information from unauthorized access, destruction, use, modification, disclosure or loss; and notifying the Authority of any security breach or unauthorized acquisition or use of personal or other Authority data or personal information. The Consultant is also required to make available upon request a copy of its comprehensive information security program.

The addendum further specifies that the Consultant must comply with the requirements of M.G.L. c. 66A with respect to personal data and other Authority data, and the requirements of M.G.L. c. 93H with respect to personal information to which it is given access pursuant to this Agreement. The Consultant must also communicate these requirements to and enforce them against its subconsultants.

View the file

Other files

File Type Posted
AddenumAttachmentNo1.pdf PDF
AddenumAttachmentNo3.pdf PDF
AttachmentD.pdf PDF
RFQP.pdf PDF
S162324-vCurrent_OD.xlsx XLSX spreadsheet
AttachmentF.pdf PDF
AddenumAttachmentNo2.pdf PDF
AttachmentE.pdf PDF
AddendumNo1.pdf PDF
AddendumNo2.pdf PDF
AttachmentA.pdf PDF
AttachmentCCompensation.pdf PDF
AttachmentG.pdf PDF
AttachmentHClaimsEnrollment.pdf PDF
Show all 14

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Addendum No. 1, Attachment 4

CONTRACT FOR PROFESSIONAL OR TECHNICAL SERVICES -

PART IV PRIVACY OF PERSONAL DATA AND INFORMATION

The Consultant shall comply with the requirements of M.G.L. c. 66A with respect to personal data and other Authority data (including but not limited to public records, documents, files, software, equipment and systems) it holds pursuant to this Agreement and with the requirements of M.G.L. c. 93H with respect to personal information to which it is given access pursuant to this Agreement. Compliance includes but is not limited to:

• Ensuring the security, confidentiality and integrity of personal and other Authority data and personal information;

• Implementing and maintaining reasonable security procedures and practices appropriate to the nature of the information;

• Protecting personal data and personal information from unauthorized access, destruction, use, modification, disclosure or loss;

• Preventing unauthorized physical access to any information technology resource;

• Preventing interception and manipulation of data during transmission to and from any servers;

• Disposing of personal data and personal information, when required or authorized by this Agreement or law or regulation, in accordance with M.G.L. c. 93I;

• Communicating these requirements to and enforcing them against its subconsultants;

and

• Notifying the Authority of the nature and circumstances of any security breach or unauthorized acquisition or use of personal or other Authority data or personal information.

The Consultant shall make available upon request a copy of its comprehensive information security program.

File details come from the government source that posted it. Updated .