Laserfiche WebLink
City of Santa Ana <br />EXHIBIT D <br />SPECIAL TERMS AND CONDITIONS (continued) <br />Agreement # C1400229 <br />6. PROTECTING CONFIDENTIAL INFORMATION/ INCIDENT REPORTING: Both agencies, <br />in recognizing the confidentiality of information exchanged, agree to take all appropriate <br />precautions to protect the confidential information obtained pursuant to this Agreement <br />from unauthorized disclosure. Both agencies will conduct oversight of its users with access <br />to the confidential information provided under this Agreement and will immediately notify <br />the FTB's Information Security Audit Unit (SecuritvAuditMail aaftb.ca.gov) of any <br />unauthorized or suspected unauthorized accesses, uses and/or disclosures (incidents). For <br />purposes of this section, immediately is defined as within 24 hours of the discovery of the <br />breach. The notification must describe the incident in detail and identify responsible <br />personnel (name, title, and contact information). The agency with an incident will comply <br />with the incident reporting requirements in accordance with Civil Code Section 1798.29 and <br />SAM Chapter 5300 to facilitate the required reporting to the taxpayers or state oversight <br />agencies. <br />INFORMATION SECURITY: Information security is defined as the preservation of the <br />confidentiality, integrity, availability, authenticity, and utility of information. A secure <br />environment is required to protect the confidential information obtained from FTB pursuant <br />to this Agreement. The City will store information so that it is physically secure from <br />unauthorized access. The records received by the City will be securely maintained and <br />accessible only by employees of the city business license or tax programs who are <br />committed to protect the data from unauthorized access, use, and disclosure. <br />8. CLOUD COMPUTING ENVIRONMENT: A Cloud Computing Environment cannot be used <br />to receive, transmit, store or process FTB's confidential data without prior approval from <br />FTB's Chief Security Officer. <br />9. DESTRUCTION OF RECORDS: All records received by the City from FTB and any <br />database(s) created, copies made, or files attributed to the records received will be <br />destroyed within three years of receipt. The records shall be destructed in a manner to be <br />deemed unusable or unreadable and to the extent that an individual record can no longer <br />be reasonably ascertained. The City will notify FTB City Business Tax Program Manager <br />annually in writing at LocalGovtLiaisonp_ftb.ca.gov that proper destruction methods have <br />been applied. FTB will destroy City data in accordance with the Department's data retention <br />policies. <br />10. SETTLEMENT OF DISPUTES: In the event of a dispute, the City shall file a "Notice of <br />Dispute" with the Chief Financial Officer of the Franchise Tax Board within ten (10) days of <br />discovery of the problem. Within ten (10) days, the Chief Financial Officer or his/her <br />designee shall meet with the City and the FTB contacts for purposes of resolving the <br />dispute. The decision of the Chief Financial Officer shall be final. <br />