Examples of HHS Confidential Information in a sentence
Answer "yes" if your business has written policies and procedures that limit the HHS Confidential Information you disclose to the minimum necessary for your workforce and subcontractors (if applicable) to perform the obligations described in the Scope of Work or service description in the Base Contract.
Answer "yes" if your business has written policies and procedures that identify everyone, including subcontractors, who are authorized to use HHS Confidential Information.
The policies and procedures should also identify the reason why these Authorized Users need to access the HHS Confidential Information and this reason must align with the Authorized Purpose described in the Scope of Work or description of services in the Base Contract with the HHS agency.
Answer "yes" if your business has written policies and procedures that explain how your business would respond to an actual or a suspected breach of HHS Confidential Information.
Answer "yes", if your business has written policies and procedures requiring you to allow individuals (clients/consumers) to access their individual record of HHS Confidential Information, and allow them to amend or correct that information, if applicable.
Answer "yes", if your business has written policies and procedures restricting access to HHS Confidential Information to only persons who have been authorized and trained on how to handle HHS Confidential Information • Item #1h.
Answer "yes", if your business has written policies and procedures requiring you to update your policies within 60 days after you have made changes to how you use or disclose HHS Confidential Information.
Answer "yes" if your business has written policies and procedures that require your employees (including yourself), your volunteers, your trainees, and any other persons whose work you direct, to comply with the requirements of HIPAA, if applicable, and other confidentiality laws as they relate to your handling of HHS Confidential Information.
Answer "yes", if your business has written policies and procedures require you to notify Reporting Authorities and Individuals whose HHS Confidential Information has been breached as described in Article 4 Section 4.03 of the DUA.
Answer "yes", if your business has written policies and procedures requiring sanctioning of any subcontractor, employee, trainee, volunteer, or anyone whose work you direct when they have accessed HHS Confidential Information but are not authorized to do so, and that you have a method of proving that you have sanctioned such an individuals.