Data Location and Access Clause Samples

Data Location and Access. It is the intent of this Aggregate Agreement that any Data related to this Aggregate Agreement reside on the premise of the Authorized User. There may be situations which necessitate the Data to be accessed or reside within the Contractor’s environment on a temporary basis strictly to perform system configuration, maintenance and support. When these situations arise, and upon written approval of the Authorized User and in compliance with all applicable security procedures and policies of the Authorized User, the Contractor may access the Data from within their environment or store Authorized User Data in their environment. In all instances the Contractor must ensure that all Data related to the work performed pursuant to the project is accessed from or stored in a physically secure location or controlled area to ensure data security, confidentiality and integrity. Notwithstanding the above Authorized User approval requirements, all access to, or storage of Data, whether physical or virtual, must be performed from within the Continental United States. The Contractor shall not send or permit to be sent, or store to any location outside of the Continental United States, any Data related to this project. Contractor shall provide to the Authorized User a list of the physical locations where the Data is stored at any given time and will update that list if the physical location changes. Adequate security systems, in compliance with all Authorized User policies and CJIS must be in place to control access into the facilities. Access into and within the facilities must be restricted through an access control system that requires positive identification of authorized individuals as well as maintains a log of all accesses as outlined in CJIS Security Policy. The Contractor shall have a formal procedure in place for granting computer system access to the Data and to track access. Access for projects outside of those approved by the Authorized User is prohibited.