Long Beach Data Sharing Agreements for Nonprofits
Third-party data sharing agreements are essential for nonprofits operating in Long Beach, California to protect personal data, meet city contracting requirements, and limit liability when partners process city-related or beneficiary information. This guide explains the municipal authority, typical clauses, compliance actions, and what local departments expect when a nonprofit shares or receives data under contract or memorandum with the City of Long Beach or its contractors.
Penalties & Enforcement
The City of Long Beach enforces data-handling obligations through contract provisions, procurement rules, and applicable municipal code sections; specific monetary fines for nonprofits under a standalone city data-sharing bylaw are not specified on the cited page.[1] Enforcement is typically exercised by the contracting department, Information Technology Services, and the City Attorney for breaches that implicate city systems or contracted services.[2]
- Monetary fines: not specified on the cited page.
- Escalation: first notice, corrective action requests, contract suspension or termination; exact escalation timeframes are not specified on the cited page.
- Non-monetary sanctions: corrective orders, suspension or termination of access, requirement to return or destroy data, indemnity demands, and referral to the City Attorney for civil action.
- Enforcer and complaints: contracting department or Information Technology Services accepts incident reports and compliance complaints; see official department contact pages for submission steps.[2]
Applications & Forms
Many data-sharing obligations are implemented through standard contract exhibits or addenda rather than a standalone city form; if a nonprofit is entering a contract with the City of Long Beach, request the data-sharing addendum from the contracting department. The municipal pages cited do not list a universal public form for third-party data-sharing agreements.[1]
How city requirements typically affect nonprofits
- Contract terms: require confidentiality, limited use, breach notification, and secure disposal.
- Data minimization and recordkeeping: only collect necessary data and keep processing records.
- Technical controls: encryption, access controls, and secure transfer protocols for city data.
- Incident reporting: prompt notification to the City and cooperation with any investigation.
Action Steps for Nonprofits
- Request the City contract data addendum from the contracting officer before sharing or receiving city-related data.
- Run a data mapping exercise to list data types, retention periods, processors, and security controls.
- Include breach notification timelines and cooperation clauses in subcontracts and MOUs.
- Report incidents to the contracting department and Information Technology Services as instructed in the contract.
FAQ
- Does Long Beach have a specific municipal bylaw for third-party data sharing?
- The City uses contract provisions and IT/security policies rather than a single public bylaw; specific bylaw text for third-party data sharing is not specified on the cited municipal code page.[1]
- Who enforces data-sharing requirements for city contracts?
- Enforcement typically involves the contracting department, Information Technology Services, and the City Attorney for legal remedies.[2]
- Are there set fines for nonprofits that mishandle city data?
- Monetary fines specific to nonprofits for data-sharing breaches are not specified on the cited page; remedies usually follow contract terms and potential civil action.[1]
How-To
- Identify whether the data relates to a city contract or program and flag it to the contracting officer.
- Request the City-approved data-sharing addendum or exhibit from the contracting department and review required clauses.
- Update internal policies to match contract obligations: retention, access, encryption, and breach notification.
- Document compliance, submit required attestations, and train staff handling city-related data.
Key Takeaways
- Nonprofits should treat city-related data as subject to contract-based controls and possible legal remedies.
- Proactive agreements, mapping, and technical controls reduce enforcement risk.
Help and Support / Resources
- Information Technology Services, City of Long Beach
- Finance - Purchasing and Contracting, City of Long Beach
- Office of the City Attorney, City of Long Beach