Common use of INFORMATION PRACTICES Clause in Contracts

INFORMATION PRACTICES. Subrecipient shall establish, maintain, and practice information procedures and controls that comply with federal and state law including, as applicable, Utah Code § 26-1-1 et seq and the privacy and security standards promulgated pursuant to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) & the Health Information Technology for Economic and Clinical Health Act of 2009 (the “HITECH Act”). Subrecipient shall receive or request from the Department only information about an individual that is necessary to Subrecipient's performance of its duties and functions. Subrecipient shall use the information only for purposes of the Contract. The Department shall inform Subrecipient of any non-public designation of any information it provides to Subrecipient.