EMPLOYEES, SUBCONTRACTORS AND AGENTS All employees, Subcontractors, or agents of the Contractor performing work under the Contract must be trained staff or technicians who meet or exceed the professional, technical, and training qualifications set forth in the Contract or the Purchase Order, and must comply with all security and administrative requirements of the Authorized User that are communicated to the Contractor. The Commissioner and the Authorized User reserve the right to conduct a security background check or otherwise approve any employee, Subcontractor, or agent furnished by Contractor and to refuse access to or require replacement of any personnel for cause based on professional, technical or training qualifications, quality of work or change in security status or non-compliance with Authorized User’s security or other requirements. Such approval shall not relieve the Contractor of the obligation to perform all work in compliance with the Contract or the Purchase Order. The Commissioner and the Authorized User reserve the right to reject and/or bar from any facility for cause any employee, Subcontractor, or agent of the Contractor.
Contractor’s Employees and Subcontractors (a) Contractor shall only disclose PII to Contractor’s employees and subcontractors who need to know the PII in order to provide the Services and the disclosure of PII shall be limited to the extent necessary to provide such Services. Contractor shall ensure that all such employees and subcontractors comply with the terms of this DPA. (b) Contractor must ensure that each subcontractor performing functions pursuant to the Service Agreement where the subcontractor will receive or have access to PII is contractually bound by a written agreement that includes confidentiality and data security obligations equivalent to, consistent with, and no less protective than, those found in this DPA. (c) Contractor shall examine the data security and privacy measures of its subcontractors prior to utilizing the subcontractor. If at any point a subcontractor fails to materially comply with the requirements of this DPA, Contractor shall: notify the EA and remove such subcontractor’s access to PII; and, as applicable, retrieve all PII received or stored by such subcontractor and/or ensure that PII has been securely deleted and destroyed in accordance with this DPA. In the event there is an incident in which the subcontractor compromises PII, Contractor shall follow the Data Breach reporting requirements set forth herein. (d) Contractor shall take full responsibility for the acts and omissions of its employees and subcontractors. (e) Contractor must not disclose PII to any other party unless such disclosure is required by statute, court order or subpoena, and the Contractor makes a reasonable effort to notify the EA of the court order or subpoena in advance of compliance but in any case, provides notice to the EA no later than the time the PII is disclosed, unless such disclosure to the EA is expressly prohibited by the statute, court order or subpoena.
SUBCONTRACTORS AND SUPPLIERS The Commissioner reserves the right to reject any proposed Subcontractor or supplier for bona fide business reasons, including, but not limited to: the company failed to solicit New York State certified minority- and women-owned business enterprises as required in prior OGS Contracts; the fact that such Subcontractor or supplier is on the New York State Department of Labor’s list of companies with which New York State cannot do business; the Commissioner’s determination that the company is not qualified or is not responsible; or the fact that the company has previously provided unsatisfactory work or services.
Indemnification by Subcontractors To the fullest extent permitted by law, an Interconnection Party that uses a subcontractor to carry out any of the Interconnection Party’s obligations under this Appendix 2 shall require each of its subcontractors to indemnify, hold harmless and defend each other Interconnection Party, its representatives and assigns from and against any and all claims and/or liability for damage to property, injury to or death of any person, including the employees of any Interconnection Party or of any Affiliate of any Interconnection Party, or any other liability incurred by the other Interconnection Party or any of its Affiliates, including all expenses, legal or otherwise, to the extent caused by any act or omission, negligent or otherwise, by such subcontractor and/or its officers, directors, employees, agents and assigns, that arises out of or is connected with the operation of the facilities of either Interconnected Entity described in this Appendix 2; provided, however, that no Interconnection Party or Affiliate thereof shall be entitled to indemnity under this Section 18.3 in respect of any injury, loss, or damage to the extent that such loss, injury, or damage results from the negligence or willful misconduct of the Interconnection Party or Affiliate seeking indemnity.
Subcontractors and Agents Business Associate hereby agrees that any time PHI is provided or made available to any subcontractors or agents, Business Associate shall provide only the minimum necessary PHI for the purpose of the covered transaction and shall first enter into a subcontract or contract with the subcontractor or agent that contains the same terms, conditions and restrictions on the use and disclosure of PHI as contained in this Agreement.
Agreements with Employees and Subcontractors Grantee shall have written, binding agreements with its employees and subcontractors that include provisions sufficient to give effect to and enable Grantee’s compliance with Grantee’s obligations under this Article VI, Intellectual Property.
Oversight of Subcontractors In the event that Vendor engages subcontractors or other authorized persons or entities to perform one or more of its obligations under the Master Agreement (including subcontracting hosting of the Protected Data to a hosting service provider), it will require those subcontractors or other authorized persons or entities to whom it will disclose the Protected Data to execute legally binding agreements acknowledging their obligation under Section 2-d of the New York Education Law to comply with all applicable data protection, privacy and security requirements required of Vendor under the Master Agreement and applicable state and federal law and regulations.
