What are the data security requirements for vendors and contractors?

Data security requirements for vendors and contractors in North Carolina are outlined in the North Carolina General Assembly’s Code Chapter 75-65. These requirements vary depending on the extent of access and contact that the vendors and contractors have with the private data of North Carolina state agencies. Vendors and contractors who collect data on behalf of North Carolina state agencies must first have written contracts in place that outline the obligations of the parties involved. These obligations include data security requirements that must be followed to protect private data. All vendors and contractors must also agree to abide by North Carolina’s policies for the protection of private data. Vendors and contractors must have reasonable security measures in place to protect the security and confidentiality of any information they collect, use, store, or transmit for North Carolina state agencies. These measures must include organizational, technical, and administrative safeguards to prevent unauthorized access and use of the private data. Vendors and contractors must also ensure that any third parties they share the data with have similar data security measures in place. They must also regularly update their security measures as needed to protect the data. Finally, vendors and contractors must provide North Carolina state agencies with prompt notification if there is a security breach that puts the private data at risk. They must also keep all records related to the private data for seven years and provide the records to the agency upon request.

Related FAQs

What is the role of a data protection officer (DPO)?
What are the implications of GDPR for international businesses?
What are the GDPR principles?
What steps should I take to protect my data on the cloud?
What rights do I have when it comes to data security?
What are the requirements for data encryption under GDPR?
What are the differences between GDPR, PIPEDA and CCPA?
What should I include in my data security policy?
What is the role of anonymization in data security?
What is the role of data security in ecommerce transactions?

What are the data security requirements for vendors and contractors?

Related FAQs

Related Blog Posts