Section 21 in Rajasthan Bhamashah (Direct Transfer of Public Welfare Benefits and Delivery of Services) Rules, 2018
21. Security obligations of service providers, etc.
- The agencies, consultants, advisors and other service providers engaged by the Authority for discharging any function relating to its processes shall, -(a)ensure compliance with the information security policy and such other policies and procedures specified by the Authority;(b)periodically report compliance with the information security policy and other policies and procedures and contractual requirements, as required by the Authority;(c)report promptly to the Authority about any security incidents affecting the confidentiality, integrity and availability of any information related to the Authority's functions;(d)ensure that records related to the Authority shall be protected from loss, destruction, falsification, unauthorised access and unauthorised release;(e)ensure confidentiality obligations are maintained during the term and on termination of the agreement;(f)ensure that appropriate security and confidentiality obligations are provided for in their agreements with their employees and staff members;(g)ensure that the employees having physical access to BRDH and logical access to centers undergo necessary background checks;(h)define the security perimeters holding sensitive information, and ensure that only the authorised individuals are allowed access to such areas to prevent any data leakage or misuse.
