40.  AUTHORITY DATA

40.1  The Contractor shall not delete or remove any proprietary notices contained within or relating to the Authority Data.

40.2  The Contractor shall not store, copy, disclose, or use the Authority Data except as necessary for the performance by the Contractor of its obligations under this Agreement or as otherwise expressly authorised in writing by the Authority.

40.3  To the extent that Authority Data is held and/or processed by the Contractor, the Contractor shall supply that Authority Data to the Authority as requested by the Authority in the format specified in Schedule B.1 (Services Description).

40.4  The Contractor shall take responsibility for preserving the integrity of Authority Data and preventing the corruption or loss of Authority Data

40.5  The Contractor shall perform secure back-ups of all Authority Data and shall ensure that up-to-date back-ups are stored off-site in accordance with the Business Continuity and Disaster Recovery Plan.  The Contractor shall ensure that such back-ups are available to the Authority at all times upon request and are delivered to the Authority at no less than [insert period] monthly intervals.

40.6  The Contractor shall ensure that any system on which the Contractor holds any Authority Data, including back-up data, is a secure system that complies with the Security Policy.

40.7  If the Authority Data is corrupted, lost or sufficiently degraded as a result of the Contractor's Default so as to be unusable, the Authority may:

40.7.1  require the Contractor (at the Contractor's expense) to restore or procure the restoration of Authority Data to the extent and in accordance with the requirements specified in Schedule B.2 (Business Continuity and Disaster Recovery Plan) and the Contractor shall do so as soon as practicable but not later than [insert period]; and/or

40.7.2  itself restore or procure the restoration of Authority Data, and shall be repaid by the Contractor any reasonable expenses incurred in doing so to the extent and in accordance with the requirements specified in Schedule B.2 (Business Continuity and Disaster Recovery Plan).

40.8  If at any time the Contractor suspects or has reason to believe that Authority Data has or may become corrupted, lost or sufficiently degraded in any way for any reason, then the Contractor shall notify the Authority immediately and inform the Authority of the remedial action the Contractor proposes to take.