Electronic Media Liability. (5) Crime/Theft; (6) Advertising Injury and Personal Injury Liability; and (7) Crisis Management and Notification Expense Coverage. Yes No N/A SECTION B: PRIVACY RISK ANALYSIS AND ASSESSMENT (To be completed by Applicant/Bidder) For any questions answered "No," an Action Plan for Compliance with a Timeline must be documented in the designated area below the question. The timeline for compliance with HIPAA-related requirements for safeguarding Protected Health Information is 30 calendar days from the date this form is signed. Compliance with requirements related to other types of Confidential Information must be confirmed within 90 calendar days from the date the form is signed.
Electronic Media Liability. (5) Crime/Theft; (6) Advertising Injury and Personal Injury Liability; and (7) Crisis Management and Notification Expense Coverage. Yes No
Electronic Media Liability. 4. Information Security Liability; and
Electronic Media Liability. (5) Crime/Theft; (6) Advertising Injury and Personal Injury Liability; and (7) Crisis Management and Notification Expense Coverage. Yes No Does Applicant/Bidder have current written privacy and security policies and procedures that, at a minimum: Does Applicant/Bidder have current written privacy and security policies and procedures that identify Authorized Users and Authorized Purposes (as defined in the DUA) relating to creation, receipt, maintenance, use, disclosure, access or transmission of HHS Confidential Information? Yes No Action Plan for Compliance with a Timeline: Compliance Date: Does Applicant/Bidder have current written privacy and security policies and procedures that require Applicant/Bidder and its Workforce to comply with the applicable provisions of HIPAA and other laws referenced in the DUA, relating to creation, receipt, maintenance, use, disclosure, access or transmission of HHS Confidential Information on behalf of a HHS agency? Yes No Action Plan for Compliance with a Timeline: Compliance Date: Does Applicant/Bidder have current written privacy and security policies and procedures that limit use or disclosure of HHS Confidential Information to the minimum that is necessary to fulfill the Authorized Purposes? Yes No Action Plan for Compliance with a Timeline: Compliance Date: Does Applicant/Bidder have current written privacy and security policies and procedures that respond to an actual or suspected breach of HHS Confidential Information, to include at a minimum (if any responses are No check No for all three): i. Immediate breach notification to the HHS agency, regulatory authorities, and other required Individuals or Authorities, in accordance with Article 4 of the DUA; ii. Following a documented breach response plan, in accordance with the DUA and applicable law; & iii. Notifying Individuals and Reporting Authorities whose HHS Confidential Information has been breached, as directed by the HHS agency? Yes No Action Plan for Compliance with a Timeline: Compliance Date: Does Applicant/Bidder have current written privacy and security policies and procedures that conduct annual workforce training and monitoring for and correction of any training delinquencies? Yes No Action Plan for Compliance with a Timeline: Compliance Date: Does Applicant/Bidder have current written privacy and security policies and procedures that permit or deny individual rights of access, and amendment or correction, when appropriate? Yes No Action Plan for ...
Electronic Media Liability. (E) Crime/Theft;
