Common use of INFORMATION PRACTICES Clause in Contracts

INFORMATION PRACTICES. 1. (Government entities only) The Contractor shall establish, maintain, and practice information procedures and controls that comply with federal and state law including, as applicable, Utah Code § 25-1-1 et seq and the privacy and security standards promulgated pursuant to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) & the Health Information Technology for Economic and Clinical Health Act of 2009 (the “HITECH Act”). The Contractor shall receive or request from the Department per this Contract only information about an individual that is necessary to the Contractor's performance of its duties and functions. Contractor shall use the information only for purposes of the Contract. The Department shall inform the Contractor of any non-public designation of any information it provides to the Contractor. If the Grantee has employees or contractors on-site such individuals will comply with the Department’s confidentiality standards and policies, including, but not limited to, "Appropriate use of state-issued and privately owned information technology resources and personal mobile devices #5.01" and "Confidential Access and Confidentiality # 1.11".

INFORMATION PRACTICES. 1. (Government entities only) The Contractor shall establish, maintain, and practice information procedures and controls that comply with federal and state law including, as applicable, Utah Code § 25-25- 1-1 et seq and the privacy and security standards promulgated pursuant to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) & the Health Information Technology for Economic and Clinical Health Act of 2009 (the “HITECH Act”). The Contractor shall receive or request from the Department per this Contract only information about an individual that is necessary to the Contractor's performance of its duties and functions. Contractor shall use the information only for purposes of the Contract. The Department shall inform the Contractor of any non-public designation of any information it provides to the Contractor. If the Grantee has employees or contractors on-site such individuals will comply with the Department’s confidentiality standards and policies, including, but not limited to, "Appropriate use of state-issued and privately owned information technology resources and personal mobile devices #5.01" and "“Confidential Access and Confidentiality # 1.11".