The New York joint utilities have filed with the New York PSC a report identifying Green Button Connect My Data (“GBC”) terms and conditions.

The utilities noted that during collaborative meetings, "it became clear that the development of GBC terms and conditions is integrally dependent on the Commission’s adoption of a form of Data Security Agreement ('DSA') in the Commission’s Cyber Security Proceeding. Indeed, much of the discussion in collaborative meetings hinged on the provisions contained in the DSA. Given that the timing of Commission consideration of the DSA is unknown, and because certain of the Joint Utilities have already implemented GBC with third parties successfully using the GBC tool, the Joint Utilities submit this report regarding the terms and conditions for third-party use of GBC."

The utilities said, "At this time, there are two basic requirements for parties connecting to GBC – a signed DSA, including self-attestation, and the attached third-party onboarding process. The Joint Utilities articulated in the Cyber Security Proceeding and in the collaborative meetings the reasons that signing and complying with the DSA is a vital and necessary condition for third parties’ use of GBC. These minimum data security requirements are necessary to protect utility and third-party systems, as well as the privacy of customer data. Con Edison and O&R have been requiring third parties to complete the DSA and self-attestation as part of the GBC onboarding process, and will continue to do so. The other Joint Utilities intend to require the DSA and self-attestation if/when they fully implement GBC."

"The Joint Utilities also require third parties to complete business and technical onboarding in order to use GBC, or equivalent data access platforms. These more technical terms and conditions include submitting required registration information, demonstrating technical capability to exchange information, and testing. Con Edison and O&R’s Third-Party Onboarding documents are attached hereto as an example of the types of business onboarding documents required for third-party use of GBC," the utilities said

The terms and conditions for GBC access can be found here