Common use of Terms of Agreement Clause in Contracts

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c., below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c., c. below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c.(c), below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Agreement 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c., below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 10 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 11 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 12 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 13 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 14 2. Responsibilities of CONTRACTOR 12 15 CONTRACTOR agrees: 13 16 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 17 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 18 and federal law. 16 19 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 20 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 21 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 22 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 23 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 24 security program that include administrative, technical and physical safeguards appropriate to the size 22 25 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 26 incorporate the requirements of Subparagraph c.subparagraph (c), below. CONTRACTOR will provide COUNTY with 24 27 its current policies upon request.

Terms of Agreement. 7 8 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 9 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 10 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement 11 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 12 2. Responsibilities of CONTRACTOR 12 13 CONTRACTOR agrees: 13 14 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required 15 by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 16 law. 16 17 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 18 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 19 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 20 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 21 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security 22 program that include administrative, technical and physical safeguards appropriate to the size 22 and 23 complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate 24 the requirements of Subparagraph c.(c), below. CONTRACTOR will provide COUNTY with 24 its current 25 policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this ExhibitExhibit C, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's ’s operations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c., c. below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Agreement 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c.(c), below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Agreement 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or required 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 15 law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and security 21 security program that include administrative, technical and physical safeguards appropriate to the size and 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which incorporate 23 incorporate the requirements of Subparagraph c.(c), below. CONTRACTOR will provide COUNTY with 24 its current 24 policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this ExhibitExhibit C, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Agreement 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's ’s operations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c., c. below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 8 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 9 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 10 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 11 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 12 2. Responsibilities of CONTRACTOR 12 13 CONTRACTOR agrees: 13 14 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 15 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 16 and federal law. 16 17 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 18 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 19 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 20 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 21 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 22 security program that include administrative, technical and physical safeguards appropriate to the size 22 23 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 24 incorporate the requirements of Subparagraph c.(c), below. CONTRACTOR will provide COUNTY with 24 25 its current policies upon request.

Terms of Agreement. 7 8 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 9 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 10 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 11 Agreement provided that such use or disclosure would not violate the CIPA if done by the 12 COUNTY. 11 13 2. Responsibilities of CONTRACTOR 12 14 CONTRACTOR agrees: 13 15 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 16 required by this Personal Information Privacy and Security Contract or as required by applicable 17 state 15 and federal law. 16 18 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 19 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to 20 protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to 21 prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information 22 Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information 23 privacy and 21 security program that include administrative, technical and physical safeguards 24 appropriate to the size 22 and complexity of CONTRACTOR's operations and the nature and scope of 25 its activities, which 23 incorporate the requirements of Subparagraph c.(c), below. CONTRACTOR will 26 provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 8 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 9 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 10 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement 11 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 12 2. Responsibilities of CONTRACTOR 12 13 CONTRACTOR agrees: 13 14 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 15 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 16 and federal law. 16 17 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 18 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 19 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 20 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 21 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 22 security program that include administrative, technical and physical safeguards appropriate to the size 22 23 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 24 incorporate the requirements of Subparagraph c.(c), below. CONTRACTOR will provide COUNTY with 24 25 its current policies upon request.

Terms of Agreement. 7 8 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 9 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 10 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement 11 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 12 2. Responsibilities of CONTRACTOR 12 13 CONTRACTOR agrees: 13 14 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 15 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 16 and federal law. 16 17 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 18 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 19 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 20 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 21 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 22 security program that include administrative, technical and physical safeguards appropriate to the size 22 23 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 24 incorporate the requirements of Subparagraph c.subparagraph (c), below. CONTRACTOR will provide COUNTY with 24 25 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Agreement 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or required 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 15 law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and security 21 security program that include administrative, technical and physical safeguards appropriate to the size and 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which incorporate 23 incorporate the requirements of Subparagraph c., ,. below. CONTRACTOR will provide COUNTY with 24 its current 24 policies upon request.

Terms of Agreement. 7 8 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 9 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 10 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement 11 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 12 2. Responsibilities of CONTRACTOR 12 13 CONTRACTOR agrees: 13 14 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required 15 by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 16 law. 16 17 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 18 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 19 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 20 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 21 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security 22 program that include administrative, technical and physical safeguards appropriate to the size 22 and 23 complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate 24 the requirements of Subparagraph c.subparagraph (c), below. CONTRACTOR will provide COUNTY with 24 its current 25 policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this ExhibitExhibit C, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Agreement 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or required 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 15 law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and security 21 security program that include administrative, technical and physical safeguards appropriate to the size and 22 and complexity of CONTRACTOR's CONTRACTOR'sCONTRACTOR’s operations and the nature and scope of its activities, 23 which 23 incorporate the requirements of Subparagraph c., c. below. CONTRACTOR will provide COUNTY 24 with 24 its current policies upon request.

Terms of Agreement. 7 9 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 10 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 11 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 12 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 13 2. Responsibilities of CONTRACTOR 12 14 CONTRACTOR agrees: 13 15 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 16 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 17 and federal law. 16 18 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 19 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 20 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 21 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 22 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 23 security program that include administrative, technical and physical safeguards appropriate to the size 22 24 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 25 incorporate the requirements of Subparagraph c.subparagraph (c), below. CONTRACTOR will provide COUNTY with 24 26 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Agreement 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size and 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which incorporate 23 incorporate the requirements of Subparagraph c., below. CONTRACTOR will provide COUNTY with 24 its current 24 policies upon request.

Terms of Agreement. 7 9 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 10 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 11 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 12 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 13 2. Responsibilities of CONTRACTOR 12 14 CONTRACTOR agrees: 13 15 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 16 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 17 and federal law. 16 18 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 19 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 20 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 21 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 22 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 23 security program that include administrative, technical and physical safeguards appropriate to the size 22 24 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 25 incorporate the requirements of Subparagraph (c.,), below. CONTRACTOR will provide COUNTY 26 with 24 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Contract 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c., c. below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 9 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 10 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 11 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 12 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 13 2. Responsibilities of CONTRACTOR 12 14 CONTRACTOR agrees: 13 15 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 16 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 17 and federal law. 16 18 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 19 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 20 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 21 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 22 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 23 security program that include administrative, technical and physical safeguards appropriate to the size 22 24 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 25 incorporate the requirements of Subparagraph c.(c), below. CONTRACTOR will provide COUNTY with 24 26 its current policies upon request.

Terms of Agreement. 7 12 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 13 otherwise indicated in this ExhibitExhibit C, CONTRACTOR may use or disclose DHCS PI only to 14 perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of 15 the 10 Agreement Contract provided that such use or disclosure would not violate the CIPA if done by the 16 COUNTY. 11 17 2. Responsibilities of CONTRACTOR 12 18 CONTRACTOR agrees: 13 19 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 20 required by this Personal Information Privacy and Security Contract or as required by applicable 21 state 15 and federal law. 16 22 b. Safeguards. To implement appropriate and reasonable administrative, technical, 23 and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, 24 to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and 25 to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal 26 Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written 27 information privacy and 21 security program that include administrative, technical and physical 28 safeguards appropriate to the size 22 and complexity of CONTRACTOR's ’s operations and the nature 29 and scope of its activities, which 23 incorporate the requirements of Subparagraph c., c. below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 10 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 11 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 12 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 13 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 14 2. Responsibilities of CONTRACTOR 12 15 CONTRACTOR agrees: 13 16 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 17 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 18 and federal law. 16 19 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 20 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 21 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 22 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 23 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 24 security program that include administrative, technical and physical safeguards appropriate to the size 22 25 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 26 incorporate the requirements of subparagraph (Subparagraph c., c),. below. CONTRACTOR will provide 27 COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 8 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 9 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 10 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 11 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 12 2. Responsibilities of CONTRACTOR 12 13 CONTRACTOR agrees: 13 14 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 15 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 16 and federal law. 16 17 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 18 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 19 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 20 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 21 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 22 security program that include administrative, technical and physical safeguards appropriate to the size 22 23 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 24 incorporate the requirements of Subparagraph c., below. CONTRACTOR will provide COUNTY with 24 25 its current policies upon request.

Terms of Agreement. 7 11 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 12 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 13 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 14 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 15 2. Responsibilities of CONTRACTOR 12 16 CONTRACTOR agrees: 13 17 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 18 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 19 and federal law. 16 20 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 21 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 22 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 23 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 24 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 25 security program that include administrative, technical and physical safeguards appropriate to the size 22 26 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 27 incorporate the requirements of Subparagraph c.subparagraph (c), below. CONTRACTOR will provide COUNTY with 24 28 its current policies upon request.

Terms of Agreement. 7 11 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 12 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 13 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement 14 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 15 2. Responsibilities of CONTRACTOR 12 16 CONTRACTOR agrees: 13 17 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required 18 by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 19 law. 16 20 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 21 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 22 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 23 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 24 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security 25 program that include administrative, technical and physical safeguards appropriate to the size 22 and 26 complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate 27 the requirements of Subparagraph c.subparagraphSubparagraph (c), below. CONTRACTOR will provide COUNTY with 24 28 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Agreement 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or required 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 15 law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and security 21 security program that include administrative, technical and physical safeguards appropriate to the size and 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which incorporate 23 incorporate the requirements of Subparagraph c., below. CONTRACTOR will provide COUNTY with 24 its current 24 policies upon request.

Terms of Agreement. 7 9 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 10 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 11 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement 12 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 13 2. Responsibilities of CONTRACTOR 12 14 CONTRACTOR agrees: 13 15 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 16 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 17 and federal law. 16 18 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 19 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 20 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 21 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 22 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 23 security program that include administrative, technical and physical safeguards appropriate to the size 22 24 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 25 incorporate the requirements of Subparagraph c.subparagraph (c), below. CONTRACTOR will provide COUNTY with 24 26 its current policies upon request.

Terms of Agreement. 7 6 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise 7 indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, 8 activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement provided 9 that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 10 2. Responsibilities of CONTRACTOR 12 11 CONTRACTOR agrees: 13 12 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required 13 by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 14 law. 16 15 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 16 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 17 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or 18 disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security 19 Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program 20 that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of 21 CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate the requirements 22 of Subparagraph c., below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 10 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 11 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 12 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 13 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 14 2. Responsibilities of CONTRACTOR 12 15 CONTRACTOR agrees: 13 16 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 17 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 18 and federal law. 16 19 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 20 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 21 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 22 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 23 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 24 security program that include administrative, technical and physical safeguards appropriate to the size 22 25 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 26 incorporate the requirements of Subparagraph c.Subparagraphsubparagraph (c), below. CONTRACTOR will provide 27 COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 9 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 10 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 11 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement 12 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 13 2. Responsibilities of CONTRACTOR 12 14 CONTRACTOR agrees: 13 15 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required 16 by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 17 law. 16 18 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 19 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 20 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 21 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 22 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security 23 program that include administrative, technical and physical safeguards appropriate to the size 22 and 24 complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate 25 the requirements of Subparagraph c.(c), below. CONTRACTOR will provide COUNTY with 24 its current 26 policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this ExhibitExhibit C, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Contract 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's operations rations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c., c. below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 6 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 7 otherwise indicated in this ExhibitExhibit C, CONTRACTOR may use or disclose DHCS PI only to perform 9 8 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement Contract 9 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 10 2. Responsibilities of CONTRACTOR 12 11 CONTRACTOR agrees: 13 12 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 13 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 14 and federal law. 16 15 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 16 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 17 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 18 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 19 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 20 security program that include administrative, technical and physical safeguards appropriate to the size 22 21 and complexity of CONTRACTOR's ’s operations and the nature and scope of its activities, which 23 22 incorporate the requirements of Subparagraph c., c. below. CONTRACTOR will provide COUNTY with 24 23 its current policies upon request.

Terms of Agreement. 7 15 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 16 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 17 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement 18 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 19 2. Responsibilities of CONTRACTOR 12 20 CONTRACTOR agrees: 13 21 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required 22 by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 23 law. 16 24 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 25 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 26 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 27 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 28 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security 29 program that include administrative, technical and physical safeguards appropriate to the size 22 and 30 complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate 31 the requirements of Subparagraph subparagraph (c.,), below. CONTRACTOR will provide COUNTY 32 with 24 its current policies upon request.

Terms of Agreement. 7 8 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 9 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 10 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 11 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 12 2. Responsibilities of CONTRACTOR 12 13 CONTRACTOR agrees: 13 14 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 15 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 16 and federal law. 16 17 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 18 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 19 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 20 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 21 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 22 security program that include administrative, technical and physical safeguards appropriate to the size 22 23 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 24 incorporate the requirements of Subparagraph c.subparagraph (c), below. CONTRACTOR will provide COUNTY with 24 25 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c., c. below. CONTRACTOR will provide COUNTY C OUNTY with 24 its current policies upon request.

Terms of Agreement. 7 10 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 11 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 12 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 13 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 14 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 16 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 17 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 18 and federal law. 16 19 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 20 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 21 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 22 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 23 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 24 security program that include administrative, technical and physical safeguards appropriate to the size 22 25 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 26 incorporate the requirements of Subparagraph c.(c), below. CONTRACTOR will provide COUNTY with 24 27 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this ExhibitExhibit C, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c., c. below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 14 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 15 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 16 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement 17 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 18 2. Responsibilities of CONTRACTOR 12 19 CONTRACTOR agrees: 13 20 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required 21 by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 22 law. 16 23 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 24 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 25 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 26 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 27 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security 28 program that include administrative, technical and physical safeguards appropriate to the size 22 and 29 complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate 30 the requirements of Subparagraph subparagraph (c.,), below. CONTRACTOR will provide COUNTY 31 with 24 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Agreement 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 - CONTRACTOR agrees: 13 12 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 13 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 14 and federal law. 16 15 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 16 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 17 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 18 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 19 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 20 security program that include administrative, technical and physical safeguards appropriate to the size 22 21 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 22 incorporate the requirements of Subparagraph c., c. below. CONTRACTOR will provide COUNTY with 24 23 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Agreement 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c., c. below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 10 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 11 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 12 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement 13 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 14 2. Responsibilities of CONTRACTOR 12 15 CONTRACTOR agrees: 13 16 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required 17 by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 18 law. 16 19 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 20 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 21 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 22 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 23 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security 24 program that include administrative, technical and physical safeguards appropriate to the size 22 and 25 complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate 26 the requirements of Subparagraph subparagraph (c.,), below. CONTRACTOR will provide COUNTY 27 with 24 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Contract 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or required 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 15 law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and security 21 security program that include administrative, technical and physical safeguards appropriate to the size and 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which incorporate 23 incorporate the requirements of Subparagraph c.(c), below. CONTRACTOR will provide COUNTY with 24 its current 24 policies upon request.

Terms of Agreement. 7 5 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 6 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 7 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement Contract 8 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 9 2. Responsibilities of CONTRACTOR 12 10 CONTRACTOR agrees: 13 11 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 12 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 13 and federal law. 16 14 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 15 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 16 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 17 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 18 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 19 security program that include administrative, technical and physical safeguards appropriate to the size 22 20 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 21 incorporate the requirements of Subparagraph c., below. CONTRACTOR will provide COUNTY with 24 22 its current policies upon request.

Terms of Agreement. 7 10 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 11 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 12 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 13 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 14 2. Responsibilities of CONTRACTOR 12 15 CONTRACTOR agrees: 13 16 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 17 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 18 and federal law. 16 19 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 20 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 21 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 22 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 23 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 24 security program that include administrative, technical and physical safeguards appropriate to the size 22 25 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 26 incorporate the requirements of Subparagraph c.(c), below. CONTRACTOR will provide COUNTY with 24 27 its current policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 - CONTRACTOR agrees: 13 12 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 13 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 14 and federal law. 16 15 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 16 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 17 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 18 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 19 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 20 security program that include administrative, technical and physical safeguards appropriate to the size 22 21 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 22 incorporate the requirements of Subparagraph c.(c), below. CONTRACTOR will provide COUNTY with 24 23 its current policies upon request.

Terms of Agreement. 7 9 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 10 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 11 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement 12 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 13 2. Responsibilities of CONTRACTOR 12 14 CONTRACTOR agrees: 13 15 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required 16 by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal 17 law. 16 18 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 19 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 20 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 21 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 22 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 23 security program that include administrative, technical and physical safeguards appropriate to the size 22 and 24 complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate 25 the requirements of Subparagraph c.subparagraph (c), below. CONTRACTOR will provide COUNTY with 24 its current 26 policies upon request.

Terms of Agreement. 7 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the Contract 10 Agreement provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 2. Responsibilities of CONTRACTOR 12 CONTRACTOR agrees: 13 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 and federal law. 16 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 security program that include administrative, technical and physical safeguards appropriate to the size 22 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 incorporate the requirements of Subparagraph c., below. CONTRACTOR will provide COUNTY with 24 its current policies upon request.

Terms of Agreement. 7 6 1. Permitted Uses and Disclosures of DHCS PI and PII by CONTRACTOR. Except as 8 7 otherwise indicated in this Exhibit, CONTRACTOR may use or disclose DHCS PI only to perform 9 8 functions, activities, or services for or on behalf of the COUNTY pursuant to the terms of the 10 Agreement Contract 9 provided that such use or disclosure would not violate the CIPA if done by the COUNTY. 11 10 2. Responsibilities of CONTRACTOR 12 11 CONTRACTOR agrees: 13 12 a. Nondisclosure. Not to use or disclose DHCS PI or PII other than as permitted or 14 13 required by this Personal Information Privacy and Security Contract or as required by applicable state 15 14 and federal law. 16 15 b. Safeguards. To implement appropriate and reasonable administrative, technical, and 17 16 physical safeguards to protect the security, confidentiality and integrity of DHCS PI and PII, to protect 18 17 against anticipated threats or hazards to the security or integrity of DHCS PI and PII, and to prevent use 19 18 or disclosure of DHCS PI or PII other than as provided for by this Personal Information Privacy and 20 19 Security Contract. CONTRACTOR shall develop and maintain a written information privacy and 21 20 security program that include administrative, technical and physical safeguards appropriate to the size 22 21 and complexity of CONTRACTOR's operations and the nature and scope of its activities, which 23 22 incorporate the requirements of Subparagraph c., below. CONTRACTOR will provide COUNTY with 24 23 its current policies upon request.