Agreement CPWI Prevention Services

Home Browse Search

4.7.5 The obligations set forth in this Section will survive completion, cancellation, expiration, or termination of this Agreement. 4.8 CONFIDENTIAL INFORMATION SECURITY The federal government, including the Substance Abuse and Mental Health Services Administration (SAMHSA), and the State of Washington all maintain security requirements regarding privacy, data access, and other areas. Contractor is required to comply with the Confidential Information Security Requirements set out in Attachment 1 to this Agreement and appropriate portions of the Washington OCIO Security Standard, 141.10 (https:l/ocio.wa.gov/policies/'1 41 -securinq-i nformation-technology-assets/14110 -securinq- informatlon -technology-asset s ). 4.9 CONFIDENTIAL INFORMATION BREACH -REQUIRED NOTIFICATION 4.9.1 Contractor must notify the HCA Privacy Officer (HCAPrivacyOfficer@hca.wa.gov) within five Business Days of discovery of any Breach or suspected Breach of Confidential Information. 4.9.2 Contractor will take steps necessary to mitigate any known harmful effects of such unauthorized access including, but not limited to, sanctioning employees and taking steps necessary to stop further unauthorized access. Contractor agrees to indemnify and hold HCA harmless for any damages related to unauthorized use or disclosure of Confidential Information by Contractor, its officers, directors, employees, Subcontractors or agents. 4.9.3 If notification of the Breach or possible Breach must (in the judgment of HCA) be made under the HIPAA Breach Notification Rule, or RCW 42.56.590 or RCW 19.255.010, or other law or rule, then: 4.9.3.1 HCA may choose to make any required notifications to the individuals, to the U.S. Department of Health and Human Services Secretary (DHHS) Secretary, and to the media, or direct Contractor to make them or any of them. 4.9.3.2 In any case, Contractor will pay the reasonable costs of notification to individuals, media, and governmental agencies and of other actions HCA reasonably considers appropriate to protect HCA clients (such as paying for regular credit watches in some cases). 4.9.3.3 Contractor will compensate HCA clients for harms caused to them by any Breach or possible Breach. 4.9.4 Any breach of this clause may result in termination of the Agreement and the demand for return or disposition (Attachment 1, Section 6) of all Confidential Information. 4.9.5 Contractor's obligations regarding Breach notification survive the termination of Washington State Health Care Authority Page 21 of90 HCA Contract No. K3924