General. The Contractor agrees to protect the confidentiality of the Commonwealth’s confidential information. The Commonwealth agrees to protect the confidentiality of Contractor’s confidential information. Unless the context otherwise clearly indicates the need for confidentiality, information is deemed confidential only when the party claiming confidentiality designates the information as “confidential” in such a way as to give notice to the other party (for example, notice may be communicated by describing the information, and the specifications around its use or disclosure, in the Solicitation or in the Proposal). Neither party may assert that information owned by the other party is such party’s confidential information. Notwithstanding the foregoing, all Data provided by, or collected, processed, or created on behalf of the Commonwealth is Confidential Information unless otherwise indicated in writing. Copying; Disclosure; Termination. The parties agree that confidential information shall not be copied, in whole or in part, or used or disclosed except when essential for authorized activities under this Contract and, in the case of disclosure, where the recipient of the confidential information has agreed to be bound by confidentiality requirements no less restrictive than those set forth herein. Each copy of confidential information shall be marked by the party making the copy with any notices appearing in the original. Upon expiration or termination of this Contract or any license granted hereunder, the receiving party will return to the disclosing party, or certify as to the destruction of, all confidential information in the receiving party’s possession, other than one copy (where permitted by law or regulation), which may be maintained for archival purposes only, and which will remain subject to this Contract’s security, privacy, data retention/destruction and confidentiality provisions. A material breach of these requirements may result in termination for default pursuant to, in addition to other remedies available to the non-breaching party. Insofar as information is not otherwise protected by law or regulation, the obligations stated in this section do not apply to information: already known to the recipient at the time of disclosure other than through the contractual relationship; independently generated by the recipient and not derived from the information supplied by the disclosing party; known or available to the public, except where such knowledge or availability is the result of unauthorized disclosure by the recipient of the proprietary information; disclosed to the recipient without a similar restriction by a third party who has the right to make such disclosure; or
ITPs set forth in , including those relating to the prevention and detection of intrusions, and any other inappropriate use or access of systems and networks. Data Storage. The Licensor shall store all Commonwealth data in the United States. The Licensor shall use industry best practices to update and patch all applicable systems and third-party software security configurations to reduce security risk. The Licensor shall protect their operational systems with applicable anti-virus, host intrusion protection, incident response monitoring and reporting, network firewalls, application firewalls, and employ system and application patch management to protect its network and customer data from unauthorized disclosure. The Licensor shall be solely responsible for applicable data storage required. The Licensor take all commercially viable and applicable measures to protect the data including, but not limited to, the backup of the servers on a daily basis in accordance with industry best practices and encryption techniques. The Licensor agrees to have appropriate controls in place to protect critical or sensitive data and shall employ stringent policies, procedures, to protect that data particularly in instances where such critical or sensitive data may be stored on a Licensor-controlled or a Licensor-owned electronic device. The Licensor shall utilize a secured backup solution to prevent loss of data, back up all data every day and store backup media. Stored backup media must be kept in an all-hazards protective storage safe at the worksite and when taken offsite. All back up data and media shall be encrypted. Adherence to Policy. The Licensor’s support and problem resolution solution shall provide a means to classify problems as to criticality and impact and with appropriate resolution procedures and escalation process for classification of each problem. The Licensor abide by the applicable Commonwealth’s Information Technology Policies (), a list of the most relevant being attached hereto as . The Licensor shall comply with all pertinent federal and state privacy regulations. Closeout. When the purchase or other procurement document’s term expires or terminates, and a new purchase order or other procurement document has not been issued by a