What must be done to contractor's access to City Data?

The requirement that contractor access to City Data must be limited to staff on a need-to-know basis is crucial for protecting sensitive information. This approach ensures that only individuals who are directly involved in a project or require specific data to perform their responsibilities can view or utilize that information. By implementing a need-to-know access policy, the city can uphold privacy standards, safeguard against unauthorized access, and minimize risks associated with data breaches. This practice is common in data management and security protocols, especially when dealing with sensitive municipal data, enhancing accountability and data integrity.

Options that suggest unrestricted access or availability at all times do not align with best practices for data security, as they could expose sensitive information to unnecessary risk. A policy of open access for project discussions lacks the necessary precautions to protect data confidentiality. Therefore, limiting access based on necessity is the most responsible and secure practice.