Improving quality. The Contractor must establish and implement procedures consistent with all confidentiality requirements of the Health Insurance Portability and Accountability Act (HIPM) (45 CFR § 1 60 and 45 CFR § 1 64) for medical records and any other health and enrollment information that identifies a particular Individual.
Improving quality. 3.3.2 The Contractor must establish and implement procedures consistent with all confidentiality requirements of the Health Insurance Portability and Accountability Act (HIPAA) (45 CFR § 160 and 45 CFR § 1 64) for medical records and any other health and enrollment information that identifies a particular Individual.
3.3.3 Jn the event an Individual's picture or personal story will be distributed outside the Contractor's agency, the Contractor shalt first obtain written consent from the Individual.
3.3.4 The Contractor must prevent inappropriate access to confidential data and/or data systems used to hold confidential client information by taking, at a minimum, the following actions: GCBH Agreement No. PRCS16-00
3.3.4.1 Verify the identity or authenticate all of the system's human users before allowing them access to any confidential data or data system capabilities.
3.3.4.2 Authorize all user access to client applications.
3.3.4.3 Protect application data from unauthorized use when at rest.
3.3.4.4 Keep any sensitive data or communications private from unauthorized individuals and programs.
3.3.4.5 Notify the GCBH IS Manager or designee within five (5) business days whenever an authorized user with access rights leaves employment or has a change ofduties such that the user no longer requires access. If the removal of access is emergent, include that information with the notification.
3.3.5 In the event of a Breach of unsecured PHI or disclosure that compromises the privacy or security of PHI obtained from any GCBH data system, the Contractor must comply with all requirements of the HIPAA Security and Privacy for Breach Notifications and as otherwise required by state or federal law.
3.3.6 GCBH reserves the right at any time to conduct audits of system access and use, and to investigate possible violations of this Agreement and/or violations of federal and state laws and regulations governing access to protected health information contained in GCBH data systems.
Improving quality. 3.3.2 The Contractor must establish and implement procedures consistent with all confidentiality requirements of the Health Insurance Portability and Accountability Act (HIPAA) (45 CFR § 160 and 45 CFR § 164) for medical records and any other health and enrollment information that identifies a particular Individual.
3.3.3 In the event an Individual's picture or personal story will be distributed outside the Contractor's agency, the Contractor shall first obtain written consent from the Individual.
3.3.4 The Contractor must prevent inappropriate access to confidential data and/or data systems used to hold confidential client information by taking, at a minimum, the following actions:
3.3.4.1 Verify the identity or authenticate all of the system's human users before allowing them access to any confidential data or data system capabilities.
3.3.4.2 Authorize all user access to client applications.
3.3.4.3 Protect application data from unauthorized use when at rest.
3.3.4.4 Keep any sensitive data or communications private from unauthorized individuals and programs.
3.3.4.5 Notify the GCBH IS Manager or designee within five (5) business days whenever an authorized user with access rights leaves employment or has a change of duties such that the user no longer requires access. If the removal of access is emergent, include that information with the notification.
3.3.5 In the event of a Breach of unsecured PHI or disclosure that compromises the privacy or security of PHI obtained from any GCBH data system, the Contractor must comply with all requirements of the HIPM Security and Privacy for Breach Notifications and as otherwise required by state or federal law.
3.3.6 GCBH reserves the right at any time to conduct audits of system access and use, and to investigate possible violations of this Agreement and/or violations of federal and state laws and regulations governing access to protected health information contained in GCBH data systems.
3.3.7 The Contractor understands that GCBH reserves the right to withdraw access to any of its confidential data systems at any time for any reason.
Improving quality. 3.3.2 The Contractor must establish and implement procedures consistent with all confidentiality requirements of the Health Insurance Portability and Accountability Act (HIPAA) (45 CFR GCBH Agreement Xx. XXXX0 0-00 § 000 xxx 00 XXX § 0 64) for medical records and any other health and enrollment information that identifies a particular Individual.
3.3.3 In the event an Individual's picture or personal story will be distributed outside the Contractor's agency, the Contractor shall first obtain written consent from the Individual.
3.3.4 The Contractor must prevent inappropriate access to confidential data and/or data systems used to hold confidential client information by taking, at a minimum, the following actions:
3.3.4. 1 Verify the identity or authenticate all of the system's human users before allowing them access to any confidential data or data system capabilities.
