Data and Information Security Compliance for Subcontractors

The contract requires subcontractors to implement comprehensive administrative, physical, and technical safeguards to ensure the protection of all Texas Department of Transportation data, including personally identifiable information and sensitive project records, throughout their operational environments. These safeguards must align with established security standards to prevent unauthorized access, disclosure, alteration, or destruction of critical information, and subcontractors are expected to maintain compliance across all stages of their involvement with TxDOT projects. Performing under this agreement, subcontractors must operate in accordance with strict data handling protocols and are accountable for securing information regardless of where or how it is processed, stored, or transmitted. The requirement applies broadly to all subcontractor activities related to TxDOT work, with a specific focus on operations in Brazos, Texas, and mandates continual adherence to industry and regulatory best practices for information security. Subcontractors must be prepared to demonstrate their security posture and compliance measures as part of their contractual obligations, with no exceptions or relaxations in requirements even during remote or third-party managed operations.