Standard: Security Controls. The Non-Exchange Entity is required to establish and implement operational, technical, administrative, and physical safeguards that are consistent with any applicable laws and ensure that: i. PII is only used by or disclosed to those authorized to receive or view it; ii. PII is protected against any reasonably anticipated threats or hazards to the confidentiality, integrity, and availability of such information; iii. PII is protected against any reasonably anticipated uses or disclosures of such information that are not permitted or required by law; and iv. PII is securely destroyed or disposed of in an appropriate and reasonable manner and in accordance with retention schedules.
Appears in 6 contracts
Samples: Agent or Broker Agreement, Agent or Broker Agreement, Agent or Broker Agreement
Standard: Security Controls. The Non-Exchange Entity is required to establish and implement operational, technical, administrative, administrative and physical safeguards that are consistent with any applicable laws and ensure that:
i. PII is only used by or disclosed to those authorized to receive or view it;
ii. PII is protected against any reasonably anticipated threats or hazards to the confidentiality, integrity, and availability of such information;
iii. PII is protected against any reasonably anticipated uses or disclosures of such information that are not permitted or required by law; and
iv. PII is securely destroyed or disposed of in an appropriate and reasonable manner and in accordance with retention schedules.
Appears in 2 contracts
Samples: Agreement Between Agents and Brokers and the Centers for Medicare & Medicaid Services, Agreement Between Agent or Broker and the Centers for Medicare & Medicaid Services
