User Responsibilities i. Users are required to follow good security practices in the selection and use of passwords;
ii. Users shall ensure that unattended equipment is protected; and
iii. Users shall adopt a clear desk policy for papers and removable storage media and a clear screen policy for information processing facilities.
Customer Responsibilities Notwithstanding the above, Customer agrees that except as provided by this DPA, Customer is responsible for its secure use of the Services, including securing its account authentication credentials, protecting the security of Customer Data when in transit to and from the Services and taking any appropriate steps to securely encrypt or backup any Customer Data uploaded to the Services.
Our Responsibilities This notice describes how medical information about you may be used and disclosed and how you can get access to this information. This notice took effect on September 23, 2013. We are required to maintain the privacy of your protected health information and we will follow the terms of this notice while it is in effect. • Your past, present, or future physical or mental health or condition • Providing you health care • The past, present, or future payment for providing you health care We collect your information as necessary to provide you with health insurance products and services and to administer our business. We may also disclose this information to nonaffiliated third parties as described in this notice. The types of information we may collect and disclose include: • Information you or your employer provide on applications and other forms, such as names, addresses, social security numbers, and dates of birth • Information about your interactions with us or others (such as providers) regarding your medical information or claims • Information you provide in person, by phone, in email, or through visits to our website • You can ask to see or get a copy of your health and claims records and other health information we have about you. • We will provide a copy or a summary of your health and claims records, usually within 30 days of your request. We may charge a reasonable, cost-based fee. • We may ask that you submit your request in writing. Please note, if you want to obtain copies of your medical records, you should contact the practitioner or facility. We do not generate, modify, or maintain complete medical records. • You may also request that we send a copy of your information to a third party. We may ask that you submit a written, signed authorization form permitting us to do so and we may charge a reasonable fee for copying and mailing your personal information. • You can ask us to correct your health and claims records if you think they are incorrect or incomplete. • We may say no to your request, but we’ll tell you why in writing within 60 days. • You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. • We will consider all reasonable requests, and must say “yes” if you tell us you would be in danger if we do not. • All requests should be made in writing. • It may take a short period of time for us to implement your request. • We will comply with your request if it is reasonable and continues to permit us to collect premiums and pay claims under your policy, including issuing certain explanations of benefits and policy information to the BlueShield of Northeastern New York is a division of HealthNow New York Inc., an independent licensee of the BlueCross BlueShield Association. 15049R_NENY_12_19 f11011 subscriber of the policy. For example, even if you request confidential communications: ο We will mail the check for services you receive from a nonparticipating provider to you but made payable to the subscriber ο Accumulated payment information such as deductibles (in which your information might appear), will continue to appear on explanations of benefits sent to the subscriber ο We may disclose to the subscriber, as the contract holder, policy details such as eligibility status or certificates of coverage • You can ask us not to use or share certain health information for treatment, payment, or our operations. • We are not required to agree to your request, but if we do, we will abide by our agreement (except when necessary for treatment in an emergency). • You have the right to authorize individuals to act on your behalf with respect to your information. You must identify your authorized representatives on a HIPAA-compliant authorization form (available on our website) and explain what type of information they may receive. • You have the right to revoke an authorization except for actions already taken based on your authorization. • You can complain if you feel we have violated your rights by contacting us using the information listed on page 4. • You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. • We will not retaliate against you for filing a complaint. • With your family, close friends, or others involved with your health care or payment for your care when you are present and have given us permission to do so. If you are not present, if it is an emergency, or you are not able to give us permission, we may give your information to a family member, friend, or other person if sharing your information is in your best interest. In these cases, the person requesting your information must accurately verify details about you (e.g., name, identification number, date of birth, etc.) and prove involvement with your health care or payment for your health care by providing details relevant to the information requested. For example, if a family member calls us with prior knowledge of a claim (e.g., provider’s name, date of service, etc.), we may confirm the claim’s status, patient responsibility, etc. We will only disclose information directly relevant to that person’s involvement with your health care or payment for your health care. • In a disaster relief situation. In these cases we never share your information unless you give us written permission: • Marketing purposes • Sale of your information • Disclose your psychotherapy notes • Make certain disclosures of information considered sensitive in nature, such as HIV/AIDS, mental health, alcohol or drug dependency, and sexually transmitted diseases. Certain federal and state laws require that we limit how we disclose this information. In general, unless we obtain your written authorization, we will only disclose such information as provided for in applicable laws. We typically use or share your health information in the following ways: • We can use your health information and share it with professionals who are treating you.
Your Responsibilities 7.1 You are responsible for installing and configuring, and using the Service, Software, and Hardware, including account set up and configuration settings (unless NCR Voyix provides remote support for any of the foregoing as part of your subscription to the Service), compliance with applicable laws and regulations, and establishing any payment processing or other services certified by NCR Voyix for use with the Service (including through NCR Voyix’s wholly owned affiliates). You are solely responsible for reviewing any default or automated settings and configuring applicable settings to meet all legal, regulatory and other requirements applicable to your business. NCR shall have no liability in connection with such settings or configurations. You acknowledge that NCR Voyix does not provide legal, tax or accounting advice. You will provide NCR Voyix access to your network, system, data, and relevant information as reasonably required to perform the Service. You acknowledge that NCR Voyix personnel may require, and you will provide, the ability to access and correct transaction or input data while the Service is being provided to you. NCR Voyix is not responsible for any damage caused by errors or omissions in any information, instructions, data, or scripts you or a third party provides on your behalf in connection with the Service, or any actions NCR Voyix takes at your direction.
7.2 To use the Service, you must maintain internet access at your own expense. NCR VOYIX IS NOT RESPONSIBLE FOR AND DOES NOT WARRANT THE PERFORMANCE OF ANY INTERNET SERVICE OR OTHER PROVIDER OR ITS SERVICES, AND YOU AGREE THAT NCR VOYIX HAS NO LIABILITY TO YOU FOR SUCH PERFORMANCE OR SERVICES.
7.3 Title to hardware, software, systems, documentation, and other intellectual property NCR Voyix uses to provide the Service will remain with NCR Voyix or its licensors, unless otherwise agreed in writing. You will take reasonable actions to protect NCR Voyix’s intellectual property rights.
7.4 You are responsible for complying with all rules, bylaws, programs, and regulations of the payment card networks in connection with your use of the Service, Software and Hardware, as applicable. You will defend and indemnify NCR Voyix against any claim or loss resulting from your failure to fulfill your responsibilities under this Section.
7.5 Certain Services may perform analysis of transaction records designed to identify transaction patterns and activity that may be indicative of fraud. You acknowledge that the indicia reported by such Services may not necessarily be the result of fraudulent activity. You are responsible for performing its own evaluation of any results. NCR Voyix does not guarantee the detection of fraudulent transactions.
7.6 You are responsible for all data, information, materials and instructions (“Customer Instructions”) provided to NCR Voyix by you or on your behalf. NCR Voyix is entitled to rely upon Customer Instructions. In no event will NCR Voyix be liable with respect to any loss, liability, cost, damage, or expense arising out of a claim by you or any third party to the extent that claim arises as a result of NCR Voyix’s compliance with Customer Instructions.
Engineer Responsibilities No subcontract relieves the Engineer of any responsibilities under this contract.
Provider Responsibilities The Private Child-Caring Facility (PCC) (a.k.a., Provider) must comply with the following requirements:
Vendor Responsibilities Note: NO EXCEPTIONS OR REVISIONS WILL BE CONSIDERED IN C-M, O-S, V-W. Indemnification
Member Responsibilities The Member’s responsibilities shall include, but are not limited to:
3.17.1. Inform the CONTRACTOR of the loss or theft of ID cards,
3.17.2. Present ID cards when using health care services,
3.17.3. Be familiar with the CONTRACTOR’s Health Plan Procedures to the best of their abilities,
3.17.4. Call or contact the CONTRACTOR to obtain information and have questions clarified,
3.17.5. Provide participating network Providers with accurate and complete medical information,
3.17.6. Follow the prescribed course of care recommended by the Provider or let the Provider know the reasons the treatment cannot be followed, as soon as possible, And
3.17.7. Make every effort to keep a scheduled appointment or cancel an appointment in advance of when it is scheduled.
Customer’s Responsibilities 2.1. A properly configured hardware firewall is required for each Customer Location using a persistent connection to the public internet or any private network where there is a potential for unauthorized access. This requirement is Customer’s responsibility.
2.2. Unless you subscribe to the Network and Security Services option known as “Antivirus Service” (or its successor product), Customer will be required to have and maintain in place third party malware and anti-virus protection software, including periodic and routine updates in accordance with the manufacturer’s recommendations, and security for the Customer’s POS System Network, which security includes unique, strong passwords per user, physical security and access control policies. Customer acknowledges and agrees that security and protection of all of its networks, including the Customer POS System Network, and the data and applications on such networks, including protections against unauthorized access, is Customer’s responsibility. Customer acknowledges that, to be effective, malware protection software, system passwords and other security software and hardware components require periodic and routine updates, which Customer must obtain or perform as applicable. Customer agrees to not use or attempt to install remote access software on the Customer POS System Network unless approved by NCR Voyix.
IRO Responsibilities The IRO shall:
1. perform each Claims Review in accordance with the specific requirements of the CIA;