Administrative, Physical and Technical Safeguards a.Administrative, Physical and Technical Safeguards. The Transportation Provider shall implement administrative, physical and technical safeguards that reasonably and appropriately protect the confidentiality, integrity and availability of PI and that prevent use or disclosure of such data other than as provided for by these Transportation Provider Performance Standards. All such safeguards must meet, at a minimum, all standards set forth in the Privacy and Security Rules, as applicable to a Business Associate, the standards set forth in National Institute of Standards and Technology standard: NIST 800-53 rev4, Moderate overlay, and all applicable EOHHS, EOTSS and other Commonwealth security and information technology resource policies, processes and mechanisms regarding access to PI or to Systems containing PI or through which PI may be accessed.
Administrative, Physical and Technical Safeguards. The Provider shall implement administrative, physical and technical safeguards that reasonably and appropriately protect the confidentiality, integrity and availability of PI and that prevent use or disclosure of such data other than as provided for by the Contract. All such safeguards must meet, at a minimum, all standards set forth in the Privacy and Security Rules, as applicable to a Business Associate, the standards set forth in National Institute of Standards and Technology standard: NIST 800-53 – Information Security, moderate standard, and all applicable EOHHS, MassIT and other Commonwealth security and information technology resource policies, processes and mechanisms regarding access to PI or to Systems containing PI or through which PI may be accessed, including those established by Executive Order 504. If the Provider must access any EOHHS System to perform an activity required by the Contract, the Provider shall comply with all applicable EOHHS, MassIT and other Commonwealth security and information technology resource policies, processes and mechanisms regarding access to PI, and any specific security mechanisms and processes adopted by EOHHS for access to the System. The Provider shall protect from inappropriate use or disclosure any password, user ID or other mechanism or code permitting access to any EOHHS System or third party System containing PI or through which PI may be accessed. The Provider shall give EOHHS prior notice of any change in personnel whenever the change requires a termination or modification of any such password, user ID or other security mechanism or code, to maintain the integrity of the System. Upon reasonable notice, the Provider agrees to allow representatives of EOHHS access to premises where PI is stored for the purpose of inspecting privacy and physical security arrangements implemented by the Provider to protect such data.
Administrative, Physical and Technical Safeguards. Effective on or before February 17, 2010, Business Associate shall implement the administrative, physical, and technical safeguards under 45 CFR §§ 164.308, 164.310, and 164.312, respectively, in accordance with 45 CFR § 164.306.
Administrative, Physical and Technical Safeguards. The Information Security Program shall consist of Administrative, Physical, and Technical Safeguards identified in this section.
Administrative, Physical and Technical Safeguards. As of the Contract effective date, the Contractor shall implement administrative, physical and technical safeguards that reasonably and appropriately protect the confidentiality, integrity and availability of PI and that prevent use or disclosure of such PI other than as provided for by this Agreement. All such safeguards must meet, at a minimum, and the Contractor shall otherwise comply with, all standards set forth in the Contract, Privacy and Security Rules, as applicable to a Business Associate, and all applicable EOHHS, EOTSS and other Commonwealth security and information technology resource policies, processes and mechanisms, including the EOHHS Enterprise Information Security Standards (attached in Exhibit 3), and the EOTSS Enterprise Information Security Policies and Standards (found online at xxxx.xxx) and any standards contained in any applicable Third Party Agreement (collectively, the “Standards”). The Contractor shall comply with any new or updated standards issued by federal, state, or other issuing agency or entity. When accessing any System to perform the Activities, the Contractor shall comply with all applicable EOHHS, EOTSS and other Commonwealth security and information technology resource policies, processes and mechanisms regarding access to PI, and any specific security mechanisms and processes adopted by EOHHS for access to the System each to the extent made known by EOHHS in writing to the Contractor. The Contractor shall protect from inappropriate use or disclosure any password, user ID or other mechanism or code permitting access to any System containing PI or through which PI may be accessed. The Contractor shall give EOHHS prior notice of any change in personnel whenever the change requires a termination or modification of any such password, user ID or other security mechanism or code, to maintain the integrity of the System. The Contractor shall notify EOHHS of any change in its administrative, technical, or operational environments that compromise or otherwise impact the confidentiality, integrity, or availability of PI or any changes to the Contractor’s information controls which alters its conformance with the Standards. Upon reasonable advance written notice, the Contractor agrees to allow representatives of EOHHS or, with respect to Third Party Data, other data owners, access to the Contractor’s premises where PI is stored for the purpose of inspecting privacy and physical security arrangements implemented by the Contra...
Administrative, Physical and Technical Safeguards. As of the Contract effective date, the Contractor shall implement administrative, physical and technical safeguards that reasonably and appropriately protect the confidentiality, integrity and availability of PI and that prevent use or disclosure of such PI other than as provided for by this Agreement. All such safeguards must meet, at a minimum, and the Contractor shall otherwise comply with, all standards set forth in the Contract, Privacy and Security Rules, as applicable to a Business Associate, and all applicable EOHHS, EOTSS, other Commonwealth security and information technology resource policies, processes and mechanisms, including the EOHHS Enterprise Information Security Standards (attached in Exhibit B) and the EOTSS Enterprise Information Security Policies and Standards (found online at Mass.gov1), and any standards contained in any applicable Third Party Agreement (collectively, the “Standards”). Contractor shall comply with any new or updated Standards issued by federal, state, or other issuing agency or entity. The Contractor shall notify EOHHS of any change in its administrative, technical, or operational environments that compromise or otherwise impact the confidentiality, integrity, or availability of PI or any changes to the Contractor’s information controls which alters its conformance with the Standards.
Administrative, Physical and Technical Safeguards. Business Associate will develop, implement, maintain, and use appropriate safeguards to prevent any use or disclosure of the PHI other than as provided by this Agreement. Business Associate will implement administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of EPHI. Business Associate acknowledges that the Security Rule provisions regarding administrative safeguards, physical safeguards, technical safeguards, and policies and procedures and documentation requirements found in 45 C.F.R. §§ 164.308, 164.310, 164.312 and 164.316 apply to Business Associate in the same manner as to Covered Entity. Business Associate will comply fully with these provisions of the Security Rule.
Administrative, Physical and Technical Safeguards. We will use commercially reasonable efforts to maintain administrative, physical and technical safeguards for protection of the security, confidentiality and integrity of User Information that are consistent with industry standards for similar services and the Privacy Policy.
