Laserfiche WebLink
The Information Recipient shall construe this clause to provide the maximum protection <br />of the information that the law allows. <br />II. SAFEGUARDING INFORMATION <br />A. CONFIDENTIALITY <br />Information Recipient agrees to: <br />• Follow DOH small numbers guidelines as well as dataset specific small <br />numbers requirements. (Appendix D) <br />• Limit access and use of the information: <br />■ To the minimum amount of information . <br />■ To the fewest people. <br />• For the least amount of time required to do the work. <br />• Assure that all people with access to the information understand their <br />responsibilities regarding it. <br />■ Assure that every person (e.g., employee or agent) with access to the <br />information signs and dates the "Use and Disclosure of Confidential <br />Information Form" (Appendix A) before accessing the information. <br />• Retain a copy of the signed and dated form as long as required in Data <br />Disposition Section. <br />The Information Recipient acknowledges the obligations in this section survive <br />completion, cancellation, expiration or termination of this Agreement. <br />B. SECURITY <br />The Information Recipient assures that its security practices and safeguards meet <br />Washington State Office of the Chief Information Officer (OCIO) security standard <br />141.10 Securing Information Technology Assets. <br />For the purposes of this Agreement, compliance with the HIPAA Security Standard and <br />all subsequent updates meets OCIO standard 141.10 "Securing Information <br />Technology Assets." <br />The Information Recipient agrees to adhere to the Data Security Requirements in <br />Appendix B. The Information Recipient further assures that it has taken steps <br />Page 7 of 26 <br />09/2017 <br />