Data Privacy, Security, and AI Use Policy Development

The City of Kyle, Texas, seeks proposals from qualified vendors to assist in the development of a comprehensive Data Privacy, Security, and Artificial Intelligence (AI) Use Policy. This policy will establish clear guidelines, standards, and best practices for the collection, storage, use, sharing, and disposal of all City data — including data processed or generated through AI systems — with an emphasis on security, privacy, transparency, and ethical use. The resulting policy must be aligned with industry-recognized frameworks and applicable laws, including but not limited to: • NIST Cybersecurity Framework (CSF) • NIST Privacy Framework • NIST AI Risk Management Framework (AI RMF) • NIST SP 800-53 Security and Privacy Controls • Applicable Texas state laws (e.g., Texas Public Information Act, Texas Data Breach Notification Law, HB 2060 establishing the Texas Artificial Intelligence Advisory Council) • Applicable federal laws (e.g., CJIS Security Policy for law enforcement data) The objectives of this engagement are to: 1. Assess the City's current data management, security, privacy, and AI usage practices. 2. Identify gaps, risks, and compliance deficiencies related to both data protection and AI governance. 3. Develop a clear, actionable Data Privacy, Security, and AI Use Policy aligned with best practices and applicable laws. 4. Create a roadmap for implementation, training, and ongoing compliance monitoring.