2025-033 - Laserfiche WebLink

Home Browse Search

A TRUE COPY CERTIFICATION ON LAST PAGE RYAN L. BUTLER, CLERK 5.10. Security. PSTA must implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk posed by the Processing of Personal Data, taking into account the costs of implementation; the nature, scope, context, and purposes of the Processing; and the risk of varying likelihood and severity of harm to the data subjects.. 5.10.1. Security Incident Notification. If PSTA becomes aware of a Security Incident involving Personal Data provided by Member, then PSTA must (i) notify Member of the Security Incident without undue delay, (ii) investigate the Security Incident and apprise Member of the details of the Security Incident and (iii) take commercially reasonable steps to stop any ongoing loss of Personal Data due to the Security Incident if in the control of PSTA. Notification of a Security Incident must not be construed as an acknowledgement or admission by PSTA of any fault or liability in connection with the Security Incident. PSTA must make reasonable efforts to assist Member in fulfilling Member's obligations under Data Protection Laws to notify the relevant supervisory authority and Data Subjects about such incident. 5.11. Data Retention and Deletion. Except for anonymized Personal Data, or as otherwise provided under the Agreement, PSTA will delete all Personal Data provided by Member no later than eighteen (18) months following termination or expiration of this Agreement unless otherwise required to comply with applicable law. 5.12. CCPA and CPRA. If PSTA is Processing Personal Data within the scope of the California Consumer Protection Act ("CCPA") and/or the California Privacy Rights Act ("CPRA") (collectively referred to as the "California Privacy Acts"), Member acknowledges that PSTA is a "Service Provider" within the meaning of the California Privacy Acts. PSTA must process Member Data and Personal Data on behalf of Member and, not retain, use, or disclose that data for any purpose other than for the purposes set out in this DPA and as permitted under the California Privacy Acts including under any "sale" exemption. In no event will PSTA or Member sell any such data. If a California Privacy Act applies, Personal Data must also include any data identified with the California Privacy Acts or Act's definition of personal data. PSTA shall provide Member with notice should it determine that it can no longer meet its obligations under the California Privacy Acts, and the parties agree that, if appropriate and reasonable, Member may take steps necessary to stop and remediate unauthorized use of the impacted Personal Data. 5.13. CPA. If PSTA is Processing Personal Data within the scope of the Colorado Privacy Rights Act ("CPA"), PSTA will comply with its obligations under the CPA, and shall make available to Member all information in its possession necessary to demonstrate compliance with obligations in accordance with § 6-1-1305(5)(d)(11)(A) of the CPA. 5.14. PSTA Contact. If Member believes that PSTA is not adhering to its privacy or security obligations hereunder, Member must contact the PSTA Data Protection Officer at PSTA Solutions, Inc., 500 W. Monroe, Chicago, IL USA 90661-3618 or at privacy1@PSTAsolutions.com. 6. Term and Termination This Agreement will be for a twelve (12) month period and will automatically renew for an additional twelve (12) month period unless either Party notifies the other Party of its intent not to renew at least thirty (30) days before the conclusion of the then -current term. PSTA may terminate this Agreement or suspend collection or delivery of the Content Material immediately if (a) Member breaches the Agreement relating to its responsibilities, license obligations, or restrictions relating to the Content Material, or (b) PSTA determines that Member's use of the Content Material poses, or may pose, a security or other risk or adverse impact to the Public Safety Threat Alliance, PSTA, PSTA's systems,