Agmt21 County of San Mateo - Laserfiche WebLink

Browse Search

Template version date: February 22, 2017 Issued by: 2 II. Restrictions on Contractor re Use and Disclosure of PII a. Contractor agrees to use or disclose PII only as permitted in this Agreement and only to assist in the administration of programs in accordance with 45 CFR § 205.50, et seq. and California Welfare & Institutions Code section 10850 or as otherwise authorized or required by law. Disclosures, when authorized or required by law, such as in response to a court order, or when made upon the explicit written authorization of the individual, who is the subject of the PII, are allowable. Any other use or disclosure of PII requires the express approval in writing by the County. No Contractor shall duplicate, disseminate or disclose PII except as allowed in this Agreement. b. Contractor agrees to only use PII to perform administrative functions related to the administration of County programs to the extent applicable. c. Contractor agrees that access to PII shall be restricted to Contractor’s staff who need to perform specific services in the administration of County programs as described in this Agreement. d. Contractor understands and agrees that any of its staff who accesses, discloses or uses PII in a manner or for a purpose not authorized by this Agreement may be subject to civil and criminal sanctions available under applicable Federal and State laws and regulations III. Use of Safeguards by Contractor to Protect PII a. Contractor agrees to ensure that any agent, including a subcontractor, to whom it provides PII received from, or created or received by Contractor on behalf of County, agrees to adhere to the same restrictions and conditions contained in this Attachment PII. b. Contractor agrees to advise its staff who have access to PII, of the confidentiality of the information, the safeguards required to protect the information, and the civil and criminal sanctions for non-compliance contained in applicable Federal and State laws and regulations. c. Contractor agrees to train and use reasonable measures to ensure compliance by Contractor’s staff, including, but not limited to (1) providing initial privacy and security awareness training to each new staff within thirty (30) days of employment; (2) thereafter, providing annual refresher training or reminders of the PII privacy and security safeguards to all Contractor’s staff; (3) maintaining records indicating each Contractor’s staff name and the date on which the privacy and security awareness training was completed; and (4) retaining training records for a period of three (3) years after completion of the training. d. Contractor agrees to provide documented sanction policies and procedures for Contractor’s staff who fail to comply with privacy policies and procedures or any provisions of these requirements, including termination of employment when appropriate. ATTY/AGR.2021.130/County of San Mateo (Page 25 of 31)