Agmt19 County of San Mateo - Laserfiche WebLink

Browse Search

i. Contractors administer or assist in the administration of County programs; ii. PH is used or disclosed; or iii. PI is stored in paper or electronic format. II. Restrictions on Contractor re Use and Disclosure of PII a. Contractor agrees to use or disclose PH only as permitted in this Agreement and only to assist in the administration of programs in accordance with 45 CFR § 205.50, et seq. and California Welfare & Institutions Code section 10850 or as otherwise authorized or required by law. Disclosures, when authorized or required by law, such as in response to a court order, or when made upon the explicit written authorization of the individual, who is the subject of the PII, are allowable. Any other use or disclosure of P1 requires the express approval in writing by the County. No Contractor shall duplicate, disseminate or disclose PH except as allowed in this Agreement. b. Contractor agrees to only use PH to perform administrative functions related to the administration of County programs to the extent applicable. c. Contractor agrees that access to PI shall be restricted to Contractor's staff who need to perform specific services in the administration of County programs as described in this Agreement. d. Contractor understands and agrees that any of its staff who accesses, discloses or uses PH in a manner or for a purpose not authorized by this Agreement may be subject to civil and criminal sanctions available under applicable Federal and State laws and regulations III. Use of Safeguards by Contractor to Protect PH a. Contractor agrees to ensure that any agent, including a subcontractor, to whom it provides PH received from, or created or received by Contractor on behalf of County, agrees to adhere to the same restrictions and conditions contained in this Attachment PH. b. Contractor agrees to advise its staff who have access to PII, of the confidentiality of the information, the safeguards required to protect the information, and the civil and criminal sanctions for non-compliance contained in applicable Federal and State laws and regulations. c. Contractor agrees to train and use reasonable measures to ensure compliance by Contractor's staff, including, but not limited to (1) providing initial privacy and security awareness training to each new staff within Template Version Date -August 16, 2016 Page 6