Implementation Specifications. 1. Access rights must apply to any PII that is created, collected, disclosed, accessed, maintained, stored, and used by the Non- Exchange Entity to perform any of the Authorized Functions outlined in their respective agreements with CMS.
Implementation Specifications. 1. The accounting shall contain the date, nature, and purpose of such disclosures, and the name and address of the person or agency to whom the disclosure is made.
Implementation Specifications. 1. The Non-Exchange Entity must obtain informed consent from individuals for any use or disclosure of information that is not permissible within the scope of the Privacy Notice Statement and any relevant agreements that were in effect as of the time the PII was collected. Such consent must be subject to a right of revocation.
Implementation Specifications. 1. The requester must submit through mail, via an electronic upload process, or in-person to the Non-Exchange Entity’s Responsible Official, a copy of one of the following government-issued identification: a driver’s license, school identification card, voter registration card, U.S. military card or draft record, identification card issued by the federal, state or local government, including a U.S. passport, military dependent’s identification card, Native American tribal document, or U.S. Coast Guard Merchant Mariner card.
Implementation Specifications. 1. The Non-Exchange Entity must require such individuals to successfully complete privacy and security training, as appropriate for their work duties and level of exposure to PII, prior to when they assume responsibility for/have access to PII.
Implementation Specifications. 1. The statement must be written in plain language and provided in a manner that is accessible and timely to people living with disabilities and with limited English proficiency.
Implementation Specifications. 1. Such individuals shall be provided with instructions as to how they should address their requests to the Non-Exchange Entity’s Responsible Official, in writing or telephonically. They may also be offered an opportunity to meet with such individual or their delegate(s) in person.
Implementation Specifications. 1. The privacy and security standards and implementation specifications shall be written in plain language and shall be available to all of the Non- Exchange Entity’s Workforce members whose responsibilities entail the creation, collection, maintenance, storage, access, or use of PII.
Implementation Specifications. 1. Non-Exchange Entity shall not request information regarding citizenship, status as a national, or immigration status for an individual who is not seeking coverage for himself or herself on any application.
Implementation Specifications. Such policies and procedures would:
