Common use of Non-Disclosure of Data Clause in Contracts

Non-Disclosure of Data. The Contractor must ensure that all employees or Subcontractors who will have access to the Data described in this Contract (including both employees who will use the Data and IT support staff) are instructed and made aware of the use restrictions and protection requirements of this Contract before gaining access to the Data identified herein. The Contractor will also instruct and make any new employee aware of the use restrictions and protection requirements of this Contract before they gain access to the Data. The Contractor will ensure that each employee or Subcontractor who will access the Data signs the User Agreement on Non-Disclosure of Confidential Information, Exhibit B hereto. The Contractor will retain the signed copy of the User Agreement on Non-Disclosure of Confidential Information in each employee’s personnel file for a minimum of six years from the date the employee’s access to the Data ends. The documentation must be available to HCA upon request. 6.3. Penalties for Unauthorized Disclosure of Data State laws (including RCW 74.04.060 and RCW 70.02.020) and federal regulations (including HIPAA Privacy and Security Rules, 45 CFR Part 160 and Part 164; Confidentiality of Alcohol and Drug Abuse Patient Records, 42 CFR, Part 2; and Safeguarding Information on Applicants and Beneficiaries, 42 CFR Part 431, Subpart F) prohibit unauthorized access, use, or disclosure of Confidential Information. The Contractor must comply with all applicable federal laws and regulations concerning collection, use, and disclosure of Personal Information and PHI. Violation of these laws may result in criminal or civil penalties or fines. The Contractor accepts full responsibility and liability for any noncompliance by itself, its employees, and its Subcontractors with these laws and any violations of the Contract.

Non-Disclosure of Data. The Contractor must ensure that all employees or Subcontractors who will have access to the Data described in this Contract (including both employees who will use the Data and IT support staff) are instructed and made aware of the use restrictions and protection requirements of this Contract before gaining access to the Data identified herein. The Contractor will also instruct and make any new employee aware of the use restrictions and protection requirements of this Contract before they gain access to the Data. The Contractor will ensure that each employee or Subcontractor who will access the Data signs the User Agreement on Non-Disclosure of Confidential Information, Exhibit B attached hereto. The Contractor will retain the signed copy of the User Agreement on Non-Disclosure of Confidential Information in each employee’s personnel file for a minimum of six years from the date the employee’s access to the Data ends. The documentation must be available to HCA upon request. 6.3. Penalties for Unauthorized Disclosure of Data State laws (including RCW 74.04.060 and RCW 70.02.020) and federal regulations (including HIPAA Privacy and Security Rules, 45 CFR Part 160 and Part 164; Confidentiality of Alcohol and Drug Abuse Patient Records, 42 CFR, Part 2; and Safeguarding Information on Applicants and Beneficiaries, 42 CFR Part 431, Subpart F) prohibit unauthorized access, use, or disclosure of Confidential Information. The Contractor must comply with all applicable federal laws and regulations concerning collection, use, and disclosure of Personal Information and PHI. Violation of these laws may result in criminal or civil penalties or fines. The Contractor accepts full responsibility and liability for any noncompliance by itself, its employees, and its Subcontractors with these laws and any violations of the Contract.