Laserfiche WebLink
Page 19 of 21 <br />c. Licensee must maintain an API that can be accessed by the City and/or City- <br />identified third-party researchers or contractors, in accordance with industry <br />standards for MDS. <br /> <br />d. Licensee shall update their APIs and GBFS/MDS standards within 90 days if <br />requested by the City. <br /> <br />e. Licensee shall disclose to each user the types of data it collects from users and <br />shared micromobility devices, the types of data licensee reports to third parties, <br />and how data is used by the licensee. <br /> <br />f. Licensee must disclose to users that anonymized user data will be shared with <br />the City of Eugene and any City-identified third-party researcher or contractor. <br /> <br />g. Licensee shall not share confidential and individual user data with any company <br />or organization except the City of Eugene and any City-identified third-party <br />researcher or contractor. <br /> <br />h. Licensee shall not sell confidential and individual user data to any third parties. <br /> <br />i. Licensee shall submit to compliance audits and enforcement actions upon request <br />by any City-authorized personnel, law enforcement officers, or any City- <br />identified third-party researcher or contractor operating at the direction of City <br />personnel under the standards established by this Administrative Rule. <br /> <br />j. The City, and any City-identified third-party researcher or contractor, may use <br />and analyze the data they receive for compliance and monitoring purposes, and to <br />create and publish derivative products and reports. Aggregate data submitted to <br />the City may be subject to public disclosure. <br /> <br />k. Licensee shall notify the City and all required users of a known data security <br />breach in the same manner as provided in ORS 646A.600 to ORS 646A.628. <br /> <br />(2) Reporting Requirements <br /> <br />Licensee shall provide monthly accurate reports to the City, and/or City-identified third- <br />party researchers and/or contractors, containing the preceding month’s: <br /> <br />a. User-involved collision and injury reports; <br /> <br />b. Complaints received by users and non-users/the Public; <br /> <br />c. Customer service responses; <br /> <br />d. Maintenance logs, including notifications received that a shared micromobility