Laserfiche WebLink
Page 10 <br />b. Contractor agrees to only use PII to perform administrative functions related to the <br />administration of County programs to the extent applicable. <br />who need to <br />perform specific services in the administration of County programs as described in this <br />Agreement. <br />d. Contractor understands and agrees that any of its staff who accesses, discloses or uses PII <br />in a manner or for a purpose not authorized by this Agreement may be subject to civil and <br />criminal sanctions available under applicable Federal and State laws and regulations <br />20.3. Use of Safeguards by Contractor to Protect PII <br />a. Contractor agrees to ensure that any agent, including a subcontractor, to whom it provides PII <br />received from, or created or received by Contractor on behalf of County, agrees to adhere to the <br />same restrictions and conditions contained in this Attachment PII. <br />b. Contractor agrees to advise its staff who have access to PII, of the confidentiality of the <br />information, the safeguards required to protect the information, and the civil and criminal <br />sanctions for non-compliance contained in applicable Federal and State laws and regulations. <br />c. Contractor agrees to train and use reasonable measures to ensure compliance by <br />ial privacy and security <br />awareness training to each new staff within thirty (30) days of employment; (2) thereafter, <br />providing annual refresher training or reminders of the PII privacy and security safeguards to all <br />on which the privacy and security awareness training was completed; and (4) retaining <br />training records for a period of three (3) years after completion of the training. <br />d. Contractor agrees to provide documented sanction policies and procedures <br />staff who fail to comply with privacy policies and procedures or any provisions of these <br />requirements, including termination of employment when appropriate. <br />e. Contractor agrees that all this Agreement sign a <br />confidentiality statement prior to accessing PII and annually thereafter. The signed statement <br />shall be retained for a period of three (3) years, and the statement include at a minimum: (1) <br />general use; (2) security and privacy safeguards; (3) unacceptable use; and (4) enforcement <br />policies. <br />f. Contractor agrees to conduct a b before they may <br />access PII with more thorough screening done for those employees who are authorized to <br />bypass significant technical and operational security controls. Contractor further agrees that <br />screening documentation shall be retained for a period of three (3) years following conclusion of <br />the employment relationship. <br />g. Contractor agrees to conduct periodic privacy and security reviews of work activity, including <br />aff by management level personnel who are <br />knowledgeable and experienced in the areas of privacy and information security in the <br />administration of and the use and disclosure of PII. Examples include, but <br />are not limited to, access to data, case files or other activities related to the handling of PII. <br />compliance contained in applicable compliance contained in applicable Federal and State laws and regulations. <br />c. Contractor agrees to train and use reasonable measures to ensure compliancec. Contractor agrees to train and use reasonable measures to ensure compliance by by <br />ATTY/AGR/2025.134/ CORE SERVICE AGENCY CONTRACT (SMC AND RWC) <br />REV: 06-04-25 VR Page 10 of 48 <br />6.L. - Page 13 of 51 <br />110