Common use of PRIVACY, CONFIDENTIALITY AND SECURITY Clause in Contracts

PRIVACY, CONFIDENTIALITY AND SECURITY. Agency will: 1) Not permit any person access to the FBCCIS unless and until that person has (a) completed the required FBCCIS training, (b) signed and returned a User License Agreement to County, and (3) has been issued an Authorized User account and Password. County reserves the right to terminate Agency access or suspend User License to any FBCCIS Agency or Authorized User who breaches client confidentiality, system security protocols or any breach of contract. 2) Maintain copies of all User License Agreements signed by Agency personnel to whom Authorized User accounts have been issued. 3) Not release any FBCCIS data to any person or organization that is not part of the FBCCIS, unless such release is covered by the FBCCIS Privacy Policies and Procedures. 4) Take all reasonably necessary precautions to prevent destructive or malicious programs (including but not limited to viruses or spyware) from being introduced to any part of the FBCCIS, including Authorized Users’ computers. Employ reasonably appropriate measures to detect virus or spyware infection and deploy all reasonably appropriate resources to efficiently disinfect any affected systems as quickly as possible. 5) Designate an individual to act as the Agency security officer, responsible for the implementation of the FBCCIS security procedures at the Agency level. 6) Develop internal security procedures to be used in the event of a violation of any of the FBCCIS security protocols. 7) Agency will not: (i) transmit or share identification or password codes to persons other than Authorized Users; (ii) permit the identification or password codes to be cached in proxy servers and accessed by individuals who are not Authorized Users; or (iii) permit access to the software through a single identification or password code being made available to multiple Authorized Users on a network. 8) Notify County within one (1) business day of the separation from the Agency of any employee who was an Authorized User of the FBCCIS. Notification should preferably occur by close of business on the day of employee separation so that Authorized User password can be discontinued. 9) Comply with all federal and state laws and regulations and with all FBCCIS policies and procedures relating to the collection, storage, retrieval, and dissemination of client information and offer assurances that all matters relative to the sharing of information will be treated in a confidential manner in accordance with all applicable State and Federal law including Protected Health Information as required by HIPAA, the Health Insurance Portability and Accountability Act.