Common use of Data Quality and Integrity Clause in Contracts

Data Quality and Integrity. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities should take reasonable steps to ensure that PII is complete, accurate, and up-to-date to the extent such data is necessary for the Non-Exchange Entity’s intended use of such data, and that such data has not been altered or destroyed in an unauthorized manner, thereby ensuring the confidentiality, integrity, and availability of PII. a. Standard: Right to Amend, Correct, Substitute, or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities must offer Consumers, Applicants, Enrollees, Qualified Employees, and Qualified Employers—or these individuals’ legal representatives or Authorized Representatives—an opportunity to request amendment, correction, substitution, or deletion of PII maintained and/or stored by the Non-Exchange Entity if such individual believes that the PII is not accurate, timely, complete, relevant, or necessary to accomplish an Exchange-related function, except where the Information questioned originated from other sources, in which case the individual should contact the originating source. i. Implementation Specifications: 1. Such individuals shall be provided with instructions as to how they should address their requests to the Non-Exchange Entity’s Responsible Official, in writing or telephonically. They may also be offered an opportunity to meet with such individual or their delegate(s) in person. 2. Such individuals shall be instructed to specify the following in each request: A. The PII they wish to correct, amend, substitute or delete; B. The reasons for requesting such correction, amendment, substitution, or deletion, along with any supporting justification or evidence. 3. Such requests must be granted or denied within no more than ten (10) business days of receipt. 4. If the Non-Exchange Entity (or its delegate) reviews these materials and ultimately agrees that the identified PII is not accurate, timely, complete, relevant, or necessary to accomplish the function for which the PII was obtained/provided, the PII should be corrected, amended, substituted, or deleted in accordance with applicable law. 5. If the Non-Exchange Entity (or its delegate) reviews these materials and ultimately does not agree that the PII should be corrected, amended, substituted, or deleted, the requestor shall be informed in writing of the denial, and, if applicable, the availability of any appeal procedures. If available, the notification must identify the appropriate appeal authority including that authority’s name, title, and contact information. b. Standard: Verification of Identity for Requests to Amend, Correct, Substitute, or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities that maintain and/or store PII must develop and implement policies and procedures to verify the identity of any person who requests access to, notification of, or modification—including amendment, correction, substitution, or deletion—of PII that is maintained by or for the Non-Exchange Entity. This includes confirmation of an individuals’ legal or personal authority to

Data Quality and Integrity. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities Entity should take reasonable steps to ensure that PII is complete, accurate, and up-to-date to the extent such data is are necessary for the Non-Exchange Entity’s intended use of such data, and that such data has have not been altered or destroyed in an unauthorized manner, thereby ensuring the confidentiality, integrity, and availability of PII. The EDE Entity must comply with any additional standards and implementation specifications described in EDE SSP DI-1: Data Quality. a. Standard: Right to Amend, Correct, Substitute, or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities Entity must offer Consumers, Applicants, Enrollees, Qualified EmployeesIndividuals, and Qualified Employers—Enrollees— or these individuals’ legal representatives or Authorized Representatives—an opportunity and process to request amendment, correction, substitution, or deletion of PII maintained and/or stored by the Non-Exchange Entity if such individual believes that the PII is not accurate, timely, complete, relevant, or necessary to accomplish an Exchange-related function, except where the Information PII questioned originated from other sources, in which case the individual should contact the originating source. The EDE Entity must comply with any additional standards and implementation specifications described in EDE SSP IP-3: Redress and IP-4: Complaint Management. i. Implementation Specifications:. 1. Such individuals shall be provided with instructions as to how they should address their requests to the Non-Exchange Entity’s Responsible Official, in writing or telephonicallyby telephone. They These individuals may also be offered an opportunity to meet with such individual the Responsible Official or their his or her delegate(s) in person. 2. Such individuals shall be instructed to specify the following in each request: A. a. The PII they wish to correct, amend, substitute or delete;; and B. b. The reasons for requesting such correction, amendment, substitution, or deletion, along with any supporting justification or evidence. 3. Such requests must be granted or denied within no more than ten (10) business working days of receipt. 4. If the Non-Exchange Entity Responsible Official (or its his or her delegate) reviews these materials and ultimately agrees that the identified PII is not accurate, timely, complete, relevant, or necessary to accomplish the function for which the PII was obtained/provided, the PII should be corrected, amended, substituted, or deleted in accordance with applicable law. 5. If the Non-Exchange Entity Responsible Official (or its his or her delegate) reviews these materials and ultimately does not agree that the PII should be corrected, amended, substituted, or deleted, the requestor shall be informed in writing of the denial, and, if applicable, the availability of any appeal procedures. If available, the notification must identify the appropriate appeal authority including that authority’s name, title, and contact information. b. Standard: Verification of Identity for Requests to Amend, Correct, Substitute, or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, a Non-Exchange Entities Entity that maintain maintains and/or store stores PII must develop and implement policies and procedures to verify the identity of any person who requests access to, notification of, or modification—including amendment, correction, substitution, or deletion—of PII that is maintained by or for the Non-Exchange Entity. This includes confirmation of an individuals’ individual’s legal or personal authority toto access, receive notification of, or seek modification— including amendment, correction, substitution, or deletion—of a Consumer’s, Applicant’s, Qualified Individual’s, or Enrollee’s PII.

Data Quality and Integrity. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities should take reasonable steps to ensure that PII is complete, accurate, and up-to-date to the extent such data is necessary for the Non-Exchange Entity’s intended use of such data, and that such data has not been altered or destroyed in an unauthorized manner, thereby ensuring the confidentiality, integrity, and availability of PII.Non- a. Standard: Right to Amend, Correct, Substitute, or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities must offer Consumers, Applicants, Enrollees, Qualified EmployeesIndividuals, and Qualified EmployersEnrollees—or these individuals’ legal representatives or Authorized Representatives—an opportunity to request amendment, correction, substitution, or deletion of PII maintained and/or stored by the Non-Exchange Entity if such individual believes that the PII is not accurate, timely, complete, relevant, or necessary to accomplish an Exchange-related function, except where the Information questioned originated from other sources, in which case the individual should contact the originating source. i. Implementation Specifications: 1. Such individuals shall be provided with instructions as to how they should address their requests to the Non-Exchange Entity’s Responsible Official, in writing or telephonically. They may also be offered an opportunity to meet with such individual or their delegate(s) in person. 2. Such individuals shall be instructed to specify the following in each request: A. The PII they wish to correct, amend, substitute or delete;; and B. The reasons for requesting such correction, amendment, substitution, or deletion, along with any supporting justification or evidence. 3. Such requests must be granted or denied within no more than ten (10) business days of receipt. 4. If the Non-Exchange Entity (or its delegate) reviews these materials and ultimately agrees that the identified PII is not accurate, timely, complete, relevant, or necessary to accomplish the function for which the PII was obtained/provided, the PII should be corrected, amended, substituted, or deleted in accordance with applicable law. 5. If the Non-Exchange Entity (or its delegate) reviews these materials and ultimately does not agree that the PII should be corrected, amended, substituted, or deleted, the requestor shall be informed in writing of the denial, and, if applicable, the availability of any appeal procedures. If available, the notification must identify the appropriate appeal authority including that authority’s name, title, and contact information. b. Standard: Verification of Identity for Requests to Amend, Correct, Substitute, Substitute or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities that maintain and/or store PII must develop and implement policies and procedures to verify the identity of any person who requests access to, notification of, or modification—including amendment, correction, substitution, or deletion—of PII that is maintained by or for the Non-Exchange Entity. This includes confirmation of an individuals’ legal or personal authority toto access, receive notification of, or seek modification—including amendment, correction, substitution, or deletion—of a Consumer’s, Applicant’s, Qualified Individual’s, or Enrollee’s PII. i. Implementation Specifications: 1. The requester must submit through mail, via an electronic upload process, or in-person to the Non-Exchange Entity’s Responsible Official, a copy of one of the following government-issued identification: a driver’s license, school identification card, voter registration card, U.S. military card or draft record, identification card issued by the federal, state or local government, including a U.S. passport, military dependent’s identification card, Native American tribal document, or U.S. Coast Guard Merchant Mariner card. 2. If such requester cannot provide a copy of one of these documents, he or she can submit two of the following documents that corroborate one another: a birth certificate, Social Security card, marriage certificate, divorce decree, employer identification card, high school or college diploma, and/or property deed or title.

Data Quality and Integrity. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities should take reasonable steps to ensure that PII is complete, accurate, and up-to-date to the extent such data is necessary for the Non-Exchange Entity’s intended use of such data, and that such data has not been altered or destroyed in an unauthorized manner, thereby ensuring the confidentiality, integrity, and availability of PII. a. Standard: Right to Amend, Correct, Substitute, or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities must offer Consumers, Applicants, Enrollees, Qualified EmployeesIndividuals, and Qualified Employers—Enrollees— or these individuals’ legal representatives or Authorized Representatives—an opportunity to request amendment, correction, substitution, or deletion of PII maintained and/or stored by the Non-Exchange Entity if such individual believes that the PII is not accurate, timely, complete, relevant, or necessary to accomplish an Exchange-related function, except where the Information questioned originated from other sources, in which case the individual should contact the originating source. i. Implementation Specifications: 1. Such individuals shall be provided with instructions as to how they should address their requests to the Non-Exchange Entity’s Responsible Official, in writing or telephonically. They may also be offered an opportunity to meet with such individual or their delegate(s) in person. 2. Such individuals shall be instructed to specify the following in each request: A. The PII they wish to correct, amend, substitute or delete; B. The reasons for requesting such correction, amendment, substitution, or deletion, along with any supporting justification or evidence. 3. Such requests must be granted or denied within no more than ten (10) business days of receipt. 4. If the Non-Exchange Entity (or its delegate) reviews these materials and ultimately agrees that the identified PII is not accurate, timely, complete, relevant, or necessary to accomplish the function for which the PII was obtained/provided, the PII should be corrected, amended, substituted, or deleted in accordance with applicable law. 5. If the Non-Exchange Entity (or its delegate) reviews these materials and ultimately does not agree that the PII should be corrected, amended, substituted, or deleted, the requestor shall be informed in writing of the denial, and, if applicable, the availability of any appeal procedures. If available, the notification must identify the appropriate appeal authority including that authority’s name, title, and contact information. b. Standard: Verification of Identity for Requests to Amend, Correct, Substitute, Substitute or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities that maintain and/or store PII must develop and implement policies and procedures to verify the identity of any person who requests access to, notification of, or modification—including amendment, correction, substitution, or deletion—of PII that is maintained by or for the Non-Exchange Entity. This includes confirmation of an individuals’ legal or personal authority toto access, receive notification of, or seek modification—including amendment, correction, substitution, or deletion—of a Consumer’s, Applicant’s, Qualified Individual’s, or Enrollee’s PII. i. Implementation Specifications: 1. The requester must submit through mail, via an electronic upload process, or in-person to the Non-Exchange Entity’s Responsible Official, a copy of one of the following government-issued identification: a driver’s license, school identification card, voter registration card, U.S. military card or draft record, identification card issued by the federal, state or local government, including a U.S. passport, military dependent’s identification card, Native American tribal document, or U.S. Coast Guard Merchant Mariner card. 2. If such requester cannot provide a copy of one of these documents, he or she can submit two of the following documents that corroborate one another: a birth certificate, Social Security card, marriage certificate, divorce decree, employer identification card, high school or college diploma, and/or property deed or title.

Data Quality and Integrity. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities should take reasonable steps to ensure that PII is complete, accurate, and up-to-date to the extent such data is necessary for the Non-Exchange Entity’s intended use of such data, and that such data has not been altered or destroyed in an unauthorized manner, thereby ensuring the confidentiality, integrity, and availability of PII. a. Standard: Right to Amend, Correct, Substitute, or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities must offer Consumers, Applicants, Enrollees, Qualified Employees, and Qualified Employers—or these individuals’ legal representatives or Authorized Representatives—an opportunity to request amendment, correction, substitution, or deletion of PII maintained and/or stored by the Non-Exchange Entity if such individual believes that the PII is not accurate, timely, complete, relevant, or necessary to accomplish an Exchange-related function, except where the Information questioned originated from other sources, in which case the individual should contact the originating source. i. Implementation Specifications: 1. Such individuals shall be provided with instructions as to how they should address their requests to the Non-Exchange Entity’s Responsible Official, in writing or telephonically. They may also be offered an opportunity to meet with such individual or their delegate(s) in person. 2. Such individuals shall be instructed to specify the following in each request: A. The PII they wish to correct, amend, substitute or delete; B. The reasons for requesting such correction, amendment, substitution, or deletion, along with any supporting justification or evidence. 3. Such requests must be granted or denied within no more than ten (10) business days of receipt. 4. If the Non-Exchange Entity (or its delegate) reviews these materials and ultimately agrees that the identified PII is not accurate, timely, complete, relevant, or necessary to accomplish the function for which the PII was obtained/provided, the PII should be corrected, amended, substituted, or deleted in accordance with applicable law. 5. If the Non-Exchange Entity (or its delegate) reviews these materials and ultimately does not agree that the PII should be corrected, amended, substituted, or deleted, the requestor shall be informed in writing of the denial, and, if applicable, the availability of any appeal procedures. If available, the notification must identify the appropriate appeal authority including that authority’s name, title, and contact information. b. Standard: Verification of Identity for Requests to Amend, Correct, Substitute, or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities that maintain and/or store PII must develop and implement policies and procedures to verify the identity of any person who requests access to, notification of, or modification—including amendment, correction, substitution, or deletion—of PII that is maintained by or for the Non-Exchange Entity. This includes confirmation of an individuals’ legal or personal authority toto access, receive notification of, or seek modification—including amendment, correction, substitution, or deletion—of a Consumer’s, Applicant’s, Enrollee’s, Qualified Employee’s, or Qualified Employer’s PII.

Data Quality and Integrity. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities Entity should take reasonable steps to ensure that PII is complete, accurate, and up-to-date to the extent such data is are necessary for the Non-Exchange Entity’s intended use of such data, and that such data has have not been altered or destroyed in an unauthorized manner, thereby ensuring the confidentiality, integrity, and availability of PII. The NEE must comply with any additional standards and implementation specifications described in NEE SSP DI-1: Data Quality. a. Standard: Right to Amend, Correct, Substitute, or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities Entity must offer Consumers, Applicants, Qualified Individuals, Enrollees, Qualified Employees, and Qualified Employers—or these individuals’ legal representatives or Authorized Representatives—an opportunity and process to request amendment, correction, substitution, or deletion of PII maintained and/or stored by the Non-Exchange Entity if such individual believes that the PII is not accurate, timely, complete, relevant, or necessary to accomplish an Exchange-Exchange- related function, except where the Information PII questioned originated from other sources, in which case the individual should contact the originating source. The NEE must comply with any additional standards and implementation specifications described in NEE SSP IP-3: Redress and IP-4: Complaint Management. i. Implementation Specifications:. 1. Such individuals shall be provided with instructions as to how they should address their requests to the Non-Exchange Entity’s Responsible Official, in writing or telephonicallyby telephone. They These individuals may also be offered an opportunity to meet with such individual the Responsible Official or their his or her delegate(s) in person. 2. Such individuals shall be instructed to specify the following in each request: A. a. The PII they wish to correct, amend, substitute or delete;; and B. b. The reasons for requesting such correction, amendment, substitution, or deletion, along with any supporting justification or evidence. 3. Such requests must be granted or denied within no more than ten (10) business days Working Days of receipt. 4. If the Non-Exchange Entity Responsible Official (or its his or her delegate) reviews these materials and ultimately agrees that the identified PII is not accurate, timely, complete, relevant, or necessary to accomplish the function for which the PII was obtained/provided, the PII should be corrected, amended, substituted, or deleted in accordance with applicable law. 5. If the Non-Exchange Entity Responsible Official (or its his or her delegate) reviews these materials and ultimately does not agree that the PII should be corrected, amended, substituted, or deleted, the requestor shall be informed in writing of the denial, and, if applicable, the availability of any appeal procedures. If available, the notification must identify the appropriate appeal authority including that authority’s name, title, and contact information. b. Standard: Verification of Identity for Requests to Amend, Correct, Substitute, or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, a Non-Exchange Entities Entity that maintain maintains and/or store stores PII must develop and implement policies and procedures to verify the identity of any person who requests access to, notification of, or modification—including amendment, correction, substitution, or deletion—of PII that is maintained by or for the Non-Exchange Entity. This includes confirmation of an individuals’ individual’s legal or personal authority toto access, receive notification of, or seek modification— including amendment, correction, substitution, or deletion—of a Consumer’s, Applicant’s, Qualified Individual’s, or Enrollee’s PII.

Data Quality and Integrity. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities should take reasonable steps to ensure that PII is complete, accurate, and up-to-date to the extent such data is necessary for the Non-Exchange Entity’s intended use of such data, and that such data has not been altered or destroyed in an unauthorized manner, thereby ensuring the confidentiality, integrity, and availability of PII.Non- a. Standard: Right to Amend, Correct, Substitute, or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities must offer Consumers, Applicants, Enrollees, Qualified EmployeesIndividuals, and Qualified EmployersEnrollees—or these individuals’ legal representatives or Authorized Representatives—an opportunity to request amendment, correction, substitution, or deletion of PII maintained and/or stored by the Non-Exchange Entity if such individual believes that the PII is not accurate, timely, complete, relevant, or necessary to accomplish an Exchange-related function, except where the Information questioned originated from other sources, in which case the individual should contact the originating source. i. Implementation Specifications: 1. Such individuals shall be provided with instructions as to how they should address their requests to the Non-Exchange Entity’s Responsible Official, in writing or telephonically. They may also be offered an opportunity to meet with such individual or their delegate(s) in person. 2. Such individuals shall be instructed to specify the following in each request: A. The PII they wish to correct, amend, substitute or delete;; and B. The reasons for requesting such correction, amendment, substitution, or deletion, along with any supporting justification or evidence. 3. Such requests must be granted or denied within no more than ten (10) business days of receipt. 4. If the Non-Exchange Entity (or its delegate) reviews these materials and ultimately agrees that the identified PII is not accurate, timely, complete, relevant, or necessary to accomplish the function for which the PII was obtained/provided, the PII should be corrected, amended, substituted, or deleted in accordance with applicable lawapplicablelaw. 5. If the Non-Exchange Entity (or its delegate) reviews these materials and ultimately does not agree that the PII should be corrected, amended, substituted, or deleted, the requestor shall be informed in writing of the denial, and, if applicable, the availability of any appeal procedures. If available, the notification must identify the appropriate appeal authority including that authority’s name, title, and contact information. b. Standard: Verification of Identity for Requests to Amend, Correct, Substitute, Substitute or Delete PII. In keeping with the standards and implementation specifications used by the FFEs, Non-Exchange Entities that maintain and/or store PII must develop and implement policies and procedures to verify the identity of any person who requests access to, notification of, or modification—including amendment, correction, substitution, or deletion—of PII that is maintained by or for the Non-Exchange Entity. This includes confirmation of an individuals’ legal or personal authority toExchange