RETENTION AND DISPOSITION OF IDENTIFIABLE RECORDS Sample Clauses

RETENTION AND DISPOSITION OF IDENTIFIABLE RECORDS. The Contractor will only retain the data and any derivative of the data for the duration of this Contract. After such time, the Contractor will have 30 days to destroy the data and any derivative in whatever form it may exist, unless, otherwise required by law or permitted under this Contract. To this end, the parties must:

RETENTION AND DISPOSITION OF IDENTIFIABLE RECORDS. The parties acknowledge that CMS retains all ownership rights to the CMS Data that PMA obtains under the terms of this Agreement, and that PMA does not obtain any right, title, or interest in any of the data furnished by CMS. The PMA will only retain the CMS Data and any derivative of the CMS Data for the period of time required by law or for any processing or purpose related to the approved uses for which the data were received.

RETENTION AND DISPOSITION OF IDENTIFIABLE RECORDS. The parties acknowledge that CMS retains all ownership rights to the CMS Data that PMA obtains under the terms of this Agreement, and that PMA does not obtain any right, title, or interest in any of the data furnished by CMS. The PMA will only retain the CMS Data and any derivative of the CMS Data for the period of time required by law or for any processing or purpose related to the approved uses for which the data were received. PROCEDURES FOR PRIVACY AND SECURITY In signing this agreement and the corresponding DRA, the PMA attests that the requested CMS Data will be protected as required by applicable law, including but not limited to the HIPAA Privacy and Security Rules at 45 CFR parts 160 and 164, including through the establishment of appropriate administrative technical and physical safeguards to protect the integrity, security, and confidentiality of the data, and to prevent unauthorized use or access to it. Additionally, the PMA acknowledges that various provisions of the U.S. Code, including, but not limited to, the Privacy Act (5 U.S.C. § 552a), 42 U.S.C. 1320d–6 (HIPAA), and Title 18, as well as the corresponding regulations, specify civil and/or criminal penalties that may be applied by applicable law enforcement authorities with respect to various misuse, including wrongful acquisition or use of, data. In signing this agreement, the PMA further affirms that such safeguards will provide a level and scope of security that is not less than the level and scope of security requirements established for federal agencies by the OMB in: OMB Circular No. A-130, Appendix III--Security of Federal Automated Information Systems, Federal Information Processing Standard 200 entitled “Minimum Security Requirements for Federal Information and Information Systems,” and

RETENTION AND DISPOSITION OF IDENTIFIABLE RECORDS. The parties acknowledge that CMS retains all ownership rights to the CMS Data that Participating State Agency obtains under the terms of this Agreement, and that Participating State Agency does not obtain any right, title, or interest in any of the data furnished by CMS. The Participating State Agency will only retain the CMS data and any derivative of the CMS data for the period of time required for any processing or purpose related to the Quality Improvement and Care Coordination and/or Program Integrity activity purposes for which the data were received. After such time, the Participating State Agency will dispose of the records in accordance with section 6 of the DUA.

RETENTION AND DISPOSITION OF IDENTIFIABLE RECORDS. The Grantee will only retain the data and any derivative of the data for the duration of this Grant Agreement. After such time, the Grantee will have 30 days to destroy the data and any derivative in whatever form it may exist, unless, otherwise required by law or permitted under this Grant Agreement. To this end, the parties must: