|
Printer-Friendly Contractor Data Protection Requirements
Any information of the type described below must be treated as confidential and subject to FedEx Sensitive Data Restrictions. These descriptions are provided as of April 6, 2007 and they are subject to change without notice.
- Personally Identifiable Information, in particular a reference to an identification number or a person’s physical, physiological, mental, economic, cultural or social identity (e.g., Social security number, driver licenses, state identification numbers, financial account numbers, personal medical information, Personal Identification (PIN) Code, digital signatures, biometric data, parent’s legal surname prior to marriage, Employee home address or phone, Employee family information, Employee financial information).
- Individually Identifiable Health Information such as FedEx employees’ health insurance coverage information, medical history, and claim appeal information;
- Financial information including financial account number, credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual's financial account;
- Cardholder information such as credit card account numbers, expiration dates, other cardholder data provided by customers, and data gathered by FedEx such as personal insights gathered about the cardholder, addresses, telephone numbers, etc.
- FedEx strategic business plans.
- FedEx corporate acquisition plans.
- FedEx operating or marketing plans.
- FedEx customer lists.
- FedEx flight schedules.
- FedEx pricing methodology.
- FedEx customer pricing.
- FedEx compensation methodology.
- FedEx corporate development activity.
- Information regarding Senior Officers.
- FedEx corporate financial data that has not been released to the public.
- A FedEx employees' home address, phone number, family information, or financial information.
- Documentation about FedEx’s unannounced products or services.
- User ID and Passwords and other user credentials.
- Documents pertaining to possible or pending legal activities.
- Information related to investigations for law enforcement purposes.
Consultant Requirements - Vendor must logically and/or physically segregate FedEx data from other customer data.
- Vendor cannot compile FedEx data; sell it, give it away for free or distribute in any manner.
- Vendor cannot use FedEx data for any purpose other than that authorized by the contract.
- Vendor cannot engage another vendor to work with FedEx sensitive data without approval from FedEx Information Security.