Employee Clauses
Mandatory contractual information security clauses applicable to employees
Purpose
Consolidate the mandatory contractual clauses that HR and Legal must include in every employment contract, as part of the Talent Acquisition Procedure.
Scope
Applies to the employment contracts of all employees, as well as to relationships with contractors and temporary staff who have access to the organization's facilities, systems or information.
1. Confidentiality and Non-Disclosure
The employee undertakes to protect the confidential information they have access to by reason of their position, not to disclose it to third parties without prior written authorization, and to return or destroy it when employment ends, an obligation that survives the termination of the contract.2. Intellectual Property
- **Ownership of work:** Every development, work, source code, design, methodology or material created by the employee in the performance of their duties or with the organization's resources will be the exclusive property of the organization, including economic copyrights.
- **Assignment and waiver:** The employee assigns to the organization all economic rights over the work carried out within the scope of their job, and waives, to the extent permitted by law, the exercise of moral rights that would affect its use by the organization.
- **Use of third-party resources:** The employee must declare every third-party or open-source component incorporated into their work, ensuring its licensing is compatible with the use intended by the organization.3. Personal Data Protection
The employee will process the personal data they have access to in accordance with applicable regulations and the organization's internal policies, solely for the purposes of their position.4. Information Security
The employee will comply with current information security policies, use the credentials and access granted exclusively to perform their duties, and immediately report any security incident they become aware of.5. Acceptable Use of Assets
The employee will make appropriate use of the equipment, systems, networks and other assets assigned by the organization, refraining from installing unauthorized software or using those assets for purposes unrelated to their job.6. Conflict of Interest and Anti-Corruption
The employee declares that their resources come from lawful activities and will refrain from engaging in corruption, bribery or conflicts of interest in the performance of their position, promptly reporting any situation that may compromise their objectivity.7. Liability and Non-Compliance
Non-compliance with these clauses will give rise to the applicable disciplinary, legal and contractual actions, in accordance with the sanctions process established in the Human Resources Security Policy.8. Termination and Return of Assets
When employment ends, for any reason, the employee will return the organization's assets in their possession, and their access and credentials will be revoked in accordance with the current deprovisioning procedure.Related Documents
Monitoring and Review
HR and Legal review these clauses annually and upon relevant regulatory changes, ensuring their alignment with the Human Resources Security Policy.