Agmt22 County of San Mateo - Laserfiche WebLink

Browse Search

Contract Template <,000 May 2021 Page 29 REV: 06-16-22 SK I. Definitions Personally Identifiable Information (PII), or Sensitive Personal Information (SPI), as used in Federal information security and privacy laws, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. PII may only be used to assist in the administration of programs in accordance with 45 C.F.R. § 205.40, et seq. and California Welfare & Institutions Code section 10850. a.“Assist in the Administration of the Program” means performing administrative functions on behalf of County programs, such as determining eligibility for, or enrollment in, and collecting context PII for such purposes, to the extent such activities are authorized by law. b.“Breach” refers to actual loss, loss of control, compromise, unauthorized disclosure, unauthorized acquisition, unauthorized access, or any similar term referring to situations where persons other than authorized users and for other than authorized purposes have access or potential access to context PII, whether electronic, paper, verbal, or recorded. c.“Contractor” means those contractors, subcontractors, vendors and agents of the County performing any functions for the County that require access to and/or use of PII and that are authorized by the County to access and use PII. d."Personally Identifiable Information” or “PII” is personally identifiable information that can be used alone, or in conjunction with any other reasonably available information, to identify a specific individual. PII includes, but is not limited to, an individual's name, social security number, driver's license number, identification number, biometric records, date of birth, place of birth, or mother’s maiden name. PII may be electronic, paper, verbal, or recorded. e.“Security Incident” means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of PII, or interference with system operations in an information system which processes PII that is under the control of the County or County’s Statewide Automated Welfare System (SAWS) Consortium, or under the control of a contractor, subcontractor or vendor of the County, on behalf of the County. f. “Secure Areas” means any area where: i. Contractors administer or assist in the administration of County programs; ii. PII is used or disclosed; or iii. PII is stored in paper or electronic format. II. Restrictions on Contractor re Use and Disclosure of PII ATTY/AGR.2022.153/County of San Mateo (HSA Contract June 2022) (Page 29 of 37) DocuSign Envelope ID: F5FF63A3-8103-4442-8F5F-F37301405123