Agmt19 County of San Mateo - Laserfiche WebLink

Browse Search

faxes in error to destroy them and notify the sender. All fax numbers shall be verified with the intended recipient before send the fax. mm. Contractor shall ensure that mailings containing PH shall be sealed and secured from damage or inappropriate viewing of PH to the extent possible. Mailings that include five hundred (500) or more individually identifiable records containing PH in a single package shall be sent using a tracked mailing method that includes verification of delivery. IV. Reporting of Breaches Required by Contractor to County: Mitigation a. Contractor shall report to County within one business day of discovery, to the County contact listed in this agreement by email or telephone as listed in the of unsecured PH, if that PII was, or is, reasonably believed to have been accessed or acquired by an unauthorized person, any suspected security incident, intrusion or unauthorized access, use or disclosure of PI in violation of this Agreement, or potential loss of confidential data affecting this Agreement. b. Contractor understands that State and Federal Law requires a breaching entity to notify individuals of a breach or unauthorized disclosure of their PII. Contractor shall ensure that said notifications shall comply with the requirements set forth in California Civil Code section 1798.29, and 42 U.S.C. section 17932, and its implementing regulations, including but not limited to, the requirement that the notifications be made without unreasonable delay and in no event later than sixty (60) calendar days. c. Contractor agrees to promptly mitigate, to the extent practicable, any harmful effect that is known to Contractor stemming from a use or disclosure of PH in violation of the requirements of this Agreement, including taking any action pertaining to such use or disclosure required by applicable Federal and State laws and regulations. V. Permitted Uses and Disclosures of PH by Contractor Except as otherwise limited in this schedule, Contractor may use or disclose PII to perform functions, activities, or services for, or on behalf of, County as specified in the Agreement; provided that such use or disclosure would not violate the Privacy Rule if done by County. VI. Obligations of County a. County shall provide Contractor with the notice of privacy practices that County produces in accordance with California Welfare and Institutions Code section 10850, as well as any changes to such notice. Template Version Date -August 26, 2016 Page 12