Safeguarding Protected Information Sample Clauses

Safeguarding Protected Information. “Protected Information” means data, regardless of form, that has been designated as private, proprietary, protected, or confidential by law, policy, or the City. Protected Information includes, but is not limited to, employment records, protected health information, student records, education records, criminal justice information, personal financial records, research data, trade secrets, classified government information, other regulated data, and personally identifiable information as defined by §§ 24-73-101(4)(b) and 6-1- 716(1)(g)(I)(A), C.R.S., as amended. Protected Information shall not include public records that by law must be made available to the public pursuant to the Colorado Open Records Act § 24-72- 201, et seq., C.R.S. To the extent there is any uncertainty as to whether data constitutes Protected Information, the data in question shall be treated as Protected Information until a determination is made by the City or an appropriate legal authority. Unless the City provides security protection for the information it discloses to the Contractor, the Contractor shall implement and maintain reasonable security procedures and practices that are both appropriate to the nature of the Protected Information disclosed and that are reasonably designed to help safeguard Protected Information from unauthorized access, use, modification, disclosure, or destruction. Disclosure of Protected Information does not include disclosure to a third party under circumstances where the City retains primary responsibility for implementing and maintaining reasonable security procedures and practices appropriate to the nature of the Protected Information, and the City implements and maintains technical controls reasonably designed to safeguard Protected Information from unauthorized access, modification, disclosure, or destruction or effectively eliminate the third party's ability to access Protected Information, notwithstanding the third party's physical possession of Protected Information. If the Contractor has been contracted to maintain, store, or process personal information on the City’s behalf, the Contractor is a “Third-Party Service Provider” as defined by § 24-73-103(1)(i), C.R.S.
Sample 1Sample 2See All (5)
Safeguarding Protected Information. “Protected Information” means data, regardless of form, that has been designated as private, proprietary, protected, or confidential by law, policy, or the City. Protected Information includes, but is not limited to, employment records, protected health information, student records, education records, criminal justice information, personal financial records, research data, trade secrets, classified government information, other regulated data, and PII. Protected Information shall not include public records that by law must be made available to the public pursuant to the Colorado Open Records Act § 00-00-000, et seq., C.R.S. To the extent there is any uncertainty as to whether data constitutes Protected Information, the data in question shall be treated as Protected Information until a determination is made by the City or an appropriate legal authority. Unless the City provides security protection for the information it discloses to the Contractor, the Contractor shall implement and maintain reasonable security procedures and practices that are both appropriate to the nature of the Protected Information disclosed and that are reasonably designed to help safeguard Protected Information from unauthorized access, use, modification, disclosure, or destruction. Disclosure of Protected Information does not include disclosure to a third party under circumstances where the City retains primary responsibility for implementing and maintaining reasonable security procedures and practices appropriate to the nature of the Protected Information, and the City implements and maintains technical controls reasonably designed to safeguard Protected Information from unauthorized access, modification, disclosure, or destruction or effectively eliminate the third party's ability to access Protected Information, notwithstanding the third party's physical possession of Protected Information. If the Contractor has been contracted to maintain, store, or process personal information on the City’s behalf, the Contractor is a “Third-Party Service Provider” as defined by § 24-73-103(1)(i), C.R.S., and shall maintain security procedures and practices consistent with §§00-00-000, et seq., C.R.S.
Sample 1Sample 2

Related to Safeguarding Protected Information

  • Other Confidential Consumer Information Party agrees to comply with the requirements of AHS Rule No. 08-048 concerning access to and uses of personal information relating to any beneficiary or recipient of goods, services or other forms of support. Party further agrees to comply with any applicable Vermont State Statute and other regulations respecting the right to individual privacy. Party shall ensure that all of its employees, subcontractors and other service providers performing services under this agreement understand and preserve the sensitive, confidential and non-public nature of information to which they may have access.

  • Protected Health Information “Protected Health Information” shall have the same meaning as the term “protected health information” in Section 160.103 and is limited to the information created or received by Contractor from or on behalf of County.

  • ACCESS TO PROTECTED HEALTH INFORMATION 7.1 To the extent Covered Entity determines that Protected Health Information is maintained by Business Associate or its agents or Subcontractors in a Designated Record Set, Business Associate shall, within two (2) business days after receipt of a request from Covered Entity, make the Protected Health Information specified by Covered Entity available to the Individual(s) identified by Covered Entity as being entitled to access and shall provide such Individuals(s) or other person(s) designated by Covered Entity with a copy the specified Protected Health Information, in order for Covered Entity to meet the requirements of 45 C.F.R. § 164.524. 7.2 If any Individual requests access to Protected Health Information directly from Business Associate or its agents or Subcontractors, Business Associate shall notify Covered Entity in writing within two (2) days of the receipt of the request. Whether access shall be provided or denied shall be determined by Covered Entity. 7.3 To the extent that Business Associate maintains Protected Health Information that is subject to access as set forth above in one or more Designated Record Sets electronically and if the Individual requests an electronic copy of such information, Business Associate shall provide the Individual with access to the Protected Health Information in the electronic form and format requested by the Individual, if it is readily producible in such form and format; or, if not, in a readable electronic form and format as agreed to by Covered Entity and the Individual.