Data Protection The contractor must Transmit Canada’s Data in a secure manner including ability for the GC to implement encryption for data in transit for all transmissions of Canada’s Data, in accordance with Section 13 - Cryptographic Protection and Section 21- Network and Communications Security The contractor must Implement security controls that restricts administrative access to Canada’s Data and Systems by the Contractor and provides the ability to require the approval of Canada before the Contractor can access Canada’s Data to perform support, maintenance or operational activities. The contractor must take reasonable measures to ensure that Contractor Personnel do not have standing or ongoing access rights to Canada’s Data, and access is restricted to Contractor Personnel with a need-to-know, including resources that provide technical or customer support, based on approval from Canada.