Common use of Safeguarding of Information Clause in Contracts

Safeguarding of Information. The Contractor shall not use or disclose Personal Information in any manner that would constitute a violation of federal law, the Health Insurance Portability and Accountability Act of 1996 (HlPAA) or any regulations enacted or revised pursuant to the HIPAA provisions and applicable provisions of Washington State law. The Contractor agrees to comply with all federal and state laws and regulations, as currently enacted or revised, regarding data security and electronic data interchange of all Personal Information. The Contractor shall protect Personal Information collected, used, or acquired in connection with this Contract, against unauthorized use, disclosure, modification or loss. The Contractor shall ensure its directors, officers, employees, subcontractors or agents use it solely for the purposes of accomplishing the services set forth in this agreement. The Contractor and its Subcontractors agree not to release, divulge, publish, transfer, sell or otherwise make it known to unauthorized persons without the express written consent of Sno-lsle Libraries or as otherwise required by law. The Contractor agrees to implement physical, electronic, and managerial policies, procedures, and safeguards to prevent unauthorized access, use, or disclosure of data in any form. The Contractor shall make the Personal Information available to amend as directed by Sno-lsle Libraries and incorporate any amendments into all the copies maintained by the Contractor or its Subcontractors. The Contractor shall certify its return or destruction upon expiration or termination of this Contract and the Contractor shall retain no copies. If the Contractor and Sno-lsle Libraries mutually determine that return or destruction is not feasible, the Contractor shall not use the Personal Information in a manner other than those permitted or required by state and federal laws. Sno-lsle Libraries reserves the right to monitor, audit, or investigate the use of Personal Information collected, used or acquired by the Contractor throughout this Contract. The monitoring, auditing, or investigating may include, but is not limited to, “salting” by Sno-lsle Libraries. Salting is the act of introducing data containing unique but false information that can be used later to identify inappropriate disclosure of data. The Contractor shall notify Sno-lsle Libraries In writing within five (5) working days of becoming aware of any unauthorized access, use or disclosure. The Contractor will take steps necessary to mitigate any known harmful effects of such unauthorized access including, but not limited to sanctioning employees, notifying subjects, and taking steps necessary to stop further unauthorized access. The Contractor agrees to indemnify and hold harmless Sno-lsle Libraries for any damages related to unauthorized use or disclosure by the Contractor, its officers, directors, and employees, Subcontractors or agents. Any breach of this clause may result in termination of the Contract and the demand for return of all Personal Information.

Safeguarding of Information. The Contractor shall not use or disclose Personal Information in any manner that would constitute a violation of federal law, the Health Insurance Portability and Accountability Act of 1996 (HlPAAHIPAA) or any regulations enacted or revised pursuant to the HIPAA provisions and applicable provisions of Washington State law. The Contractor agrees to comply with all federal and state laws and regulations, as currently enacted or revised, regarding data security and electronic data interchange of all Personal Information. The Contractor shall protect Personal Information collected, used, or acquired in connection with this Contract, against unauthorized use, disclosure, modification or loss. The Contractor shall ensure its directors, officers, employees, subcontractors or agents use it solely for the purposes of accomplishing the services set forth in this agreement. The Contractor and its Subcontractors agree not to release, divulge, publish, transfer, sell or otherwise make it known to unauthorized persons without the express written consent of Sno-lsle Libraries AGENCY or as otherwise required by law. The Contractor agrees to implement physical, electronic, and managerial policies, procedures, and safeguards to prevent unauthorized access, use, or disclosure of data in any form. The Contractor shall make the Personal Information available to amend as directed by Sno-lsle Libraries Agency and incorporate any amendments into all the copies maintained by the Contractor or its Subcontractors. The Contractor shall certify its return or destruction upon expiration or termination of this Contract and the Contractor shall retain no copies. If the Contractor and Sno-lsle Libraries Agency mutually determine that return or destruction is not feasible, the Contractor shall not use the Personal Information in a manner other than those permitted or required by state and federal laws. Sno-lsle Libraries Agency reserves the right to monitor, audit, or investigate the use of Personal Information personal information collected, used or acquired by the Contractor throughout contractor through this Contractcontract. The monitoring, auditing, or investigating may include, but is not limited to, “salting” by Sno-lsle LibrariesAgency. Salting is the act of introducing data containing unique but false information that can be used later to identify inappropriate disclosure of data. The Contractor shall notify Sno-lsle Libraries In Agency in writing within five (5) 5 working days of becoming aware of any unauthorized access, use or disclosure. The Contractor contractor will take steps necessary to mitigate any known harmful effects of such unauthorized access including, but not limited to sanctioning employees, notifying subjects, and taking steps necessary to stop further unauthorized access. The Contractor agrees to indemnify and hold harmless Sno-lsle Libraries Agency for any damages related to unauthorized use or disclosure by the Contractor, its officers, directors, and employees, Subcontractors or agents. Any breach of this clause may result in termination of the Contract contract and the demand for return of all Personal Information.