Personal Identifying Information. The Contractor will comply with any laws relating to the use, safeguarding, or processing of any Personal Identifying Information. The Contractor will ensure that any such receiving party abides by any limitations. Notwithstanding the foregoing, the Contractor represents and warrants that Personal Identifying Information will not be processed, transmitted, or stored outside of the United States. The Contractor shall take reasonable steps to maintain the confidentiality of and will not reveal or divulge to any person or entity any Personal Identifying Information that becomes known to it during the term of this Contract. The Contractor must maintain policies and programs that prohibit unauthorized disclosure of Personal Identifying Information by its employees and subcontrac- tors and promote training and awareness of information security policies and practices. The Contractor must comply, and must cause its employees, representatives, agents, and subcontractors to comply, with such commercially and operationally reasonable directions as the Authority may make to promote the safeguarding or confidentiality of Personal Identifying Information. The Con- tractor must conduct background checks for employees or sub-Contractors that have access to Personal Identifying Information or systems processing Personal Identifying Information. The Contractor must limit access to computers and networks that host Personal Identifying Information, including without limitation through user credentials and strong passwords, data encryption both during transmission and at rest, firewall rules, and network-based intrusion detection systems. In addition to the foregoing, to the extent that any Personal Identifying Information qualifies as Protected Health Information that is subject to protection under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA," found at Public Law 104-191), and certain privacy and security regulations promulgated by the U.S. Department of Health and Human Services to implement certain provisions of HIPAA and the Health Information Technology for Economic and Clinical Health Act (the "HITECH Act"), and its implementing regulations found in the Omnibus Final Rule (collectively the "HIPAA Regulations") found at 45 C.F.R. Parts 160, 162 and 164, the Contractor will execute and abide by all rights and obligations set forth by the Authority.
Appears in 1 contract
Sources: General Planning Consulting Services
Personal Identifying Information. The Contractor will comply with any laws relating to the use, safeguarding, or processing of any Personal Identifying Information. The Contractor will ensure that any such receiving party abides by any limitations. Notwithstanding the foregoing, the Contractor represents and warrants that Personal Identifying Information will not be processed, transmitted, or stored outside of the United States. The Contractor shall take reasonable steps to maintain the confidentiality of and will not reveal or divulge to any person or entity any Personal Identifying Information that becomes known to it during the term of this Contract. The Contractor must maintain policies and programs that prohibit unauthorized disclosure of Personal Identifying Information by its employees and subcontrac- tors and promote training and awareness of information security policies and practices. The Contractor must comply, and must cause its employees, representatives, agents, and subcontractors to comply, with such commercially and operationally reasonable directions as the Authority may make to promote the safeguarding or confidentiality of Personal Identifying Information. The Con- tractor must conduct background checks for employees or sub-Contractors that have access to Personal Identifying Information or systems processing Personal Identifying Information. The Contractor must limit access to computers and networks that host Personal Identifying Information, including without limitation through user credentials and strong passwords, data encryption both during transmission and at rest, firewall rules, and network-based intrusion detection systems. In addition to the foregoing, to the extent that any Personal Identifying Information qualifies as Protected Health Information that is subject to protection under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA," found at Public Law 104-191), and certain privacy and security regulations promulgated by the U.S. Department of Health and Human Services to implement certain provisions of HIPAA and the Health Information Technology for Economic and Clinical Health Act (the "HITECH Act"), and its implementing regulations found in the Omnibus Final Rule (collectively the "HIPAA Regulations") found at 45 C.F.R. Parts 160, 162 and 164, the Contractor will execute and abide by all rights and obligations set forth by the Authority.
Appears in 1 contract
Sources: General Planning Consulting Services