Laserfiche WebLink
Information, monetary damages, or penalties. <br />4.7.5 The obligations set forth in this Section will survive completion, cancellation, <br />expiration, or termination of this Agreement. <br />4.8 CONFIDENTIAL INFORMATION SECURITY <br />The federal government, including the Substance Abuse and Mental Health Services <br />Administration (SAMHSA), and the State of Washington all maintain security requirements <br />regarding privacy, data access, and other areas. Contractor is required to comply with the <br />Confidential Information Security Requirements set out in Attachment 1 to this Agreement <br />and appropriate portions of the Washington OCIO Security Standard, 141.10 <br />(httcs:l/ocio.wa.g ov/pol ici es1141-securi ng -i nformation-technology-assets/l 4110-securing- <br />inform <br />0-securineinform ation-technol ogy-assets). <br />4.9 CONFIDENTIAL INFORMATION BREACH — REQUIRED NOTIFICATION <br />4.9.1 Contractor must notify the HCA Privacy Officer <br />(HCAPrivacyOfficer(&hca.wa.gov) within five Business Days of discovery of <br />any Breach or suspected Breach of Confidential Information. <br />4.9.2 Contractor will take steps necessary to mitigate any known harmful effects of <br />such unauthorized access including, but not limited to, sanctioning employees <br />and taking steps necessary to stop further unauthorized access. Contractor <br />agrees to indemnify and hold HCA harmless for any damages related to <br />unauthorized use or disclosure of Confidential Information by Contractor, its <br />officers, directors, employees, Subcontractors or agents. <br />4.9.3 If notification of the Breach or possible Breach must (in the judgment of HCA) <br />be made under the HIPAA Breach Notification Rule, or RCW 42.56.590 or <br />RCW 19.255.010, or other law or rule, then: <br />4.9.3.1 HCA may choose to make any required notifications to the <br />individuals, to the U.S. Department of Health and Human Services <br />Secretary (DHHS) Secretary, and to the media, or direct Contractor <br />to make them or any of them. <br />4.9.3.2 In any case, Contractor will pay the reasonable costs of notification <br />to individuals, media, and governmental agencies and of other <br />actions HCA reasonably considers appropriate to protect HCA <br />clients (such as paying for regular credit watches in some cases). <br />4.9.3.3 Contractor will compensate HCA clients for harms caused to them <br />by any Breach or possible Breach. <br />4.9.4 Any breach of this clause may result in termination of the Agreement and the <br />demand for return or disposition (Attachment 1, Section 6) of all Confidential <br />Washington State Page 21 HCA Contract No. K3924 <br />Health Care Authority <br />