PROTECTION OF CONFIDENTIAL AND PERSONAL INFORMATION. Contractor acknowledges that some of the material and information that may come into its possession or knowledge in connection with this Contract or its performance may consist of information that is exempt from disclosure to the public or other unauthorized persons under either Chapter 42.56 RCW or other state or federal statutes (“Confidential Information”). Confidential Information includes, but is not limited to, names, addresses, Social Security numbers, e-mail addresses, telephone numbers, financial profiles, credit card information, driver’s license numbers, medical data, law enforcement records, agency source code or object code, agency security data, or information identifiable to an individual that relates to any of these types of information. Contractor agrees to hold Confidential Information in strictest confidence and not to make use of Confidential Information for any purpose other than the performance of this Contract, to release it only to authorized employees or Subcontractors requiring such information for the purposes of carrying out this Contract, and not to release, divulge, publish, transfer, sell, disclose, or otherwise make the information known to any other party without Purchaser’s express written consent or as provided by law. Contractor agrees to release such information or material only to employees or Subcontractors who have signed a nondisclosure agreement, the terms of which have been previously approved by Purchaser. Contractor agrees to implement physical, electronic, and managerial safeguards to prevent unauthorized access to Confidential Information. “Personal information” including, but not limited to, “Protected Health Information” (PHI) under Health Insurance Portability And Accountability Act (HIPAA), individuals’ names, addresses, phone numbers, birth dates, and social security numbers collected, used, or acquired in connection with this Contract shall be protected against unauthorized use, disclosure, modification or loss. HIPAA establishes national minimum standards for the use and disclosure of certain health information. The Contractor must comply with all HIPAA requirements and rules when determined applicable by the Purchaser. If Purchaser determines that (1) Purchaser is a “covered entity” under HIPAA, and that (2) Contractor will perform “business associate” services and activities covered under HIPAA, then at Purchaser’s request, Contractor agrees to execute Purchaser’s business associate Contract in compli...
