Laserfiche WebLink
Docu$iqn Irrvelope lD: 243301 1 "l-$:]47-4817-tl4Ag-41 tCDAIACCD4 <br />$pecial Tcrmc and Conditians <br />EXHIBIT A <br />DATA $EC URITY REQUIREMENTS <br />ORGANIZATION OF DATA SECUR1TY RESUIREMENTS <br />1. 0efinitions <br />2. Authority <br />3. Scope of Protection <br />4. Conrpliance with Laws, Rules, Regulations, and Policy5. Administrative Controls <br />6. Authorizaiion, Authentieation, and Access7. Protection of DataL Method of Transfer <br />9. $ystem Prol*ction <br />10. Data Segregation <br />1 1, Confidentiality Protection <br />12. Data Disposition <br />13. Data shared with Subcontractors <br />14. Notification of Conrpronrise or Poisntial Compromise <br />15. Breach of Data <br />16. Public Disslosure <br />1. Definitions. The words and phrases fisted belsw, a$ used in this Exhibit, shalleach have thefoll owing <br />definilions: <br />a. "AES" means the Advanced Encqrption Standard, a specification of Federal lnfornration Processing <br />Standards Pt"tblications for the encryption of electronic data issued by the National lnsiitute of <br />StancJarcls and Teehnology (L:i1*;i"illvj.*ij.*g-.1tJS3,.q.A:{irygl.-c.!"?-Sl"t"iJ:]i,i#lii:i","ti1l,t,-1$-l;;-$}. <br />b. "Auihorized Users(s)" rneans an individual or individuals with a business need to acce$s DCYF <br />Conficlential lnformation and v,rho has i:een auihorized to do so. <br />c. "Business Associate Agreement" means an agreemeni between DCYF and a contractorvyho is <br />receiving Dala covered under the Privacy and Secr.*rity Rules of the Ffealth lnsuranca Portability <br />and Accountability Act of 1996. The agreerne nt establishes permitted and required uses and <br />disclosures of protected health information iPHl) in accardanse with l-ilPAA requirements and <br />providea obligations f,rr business associates lo safeguard the infornration. <br />d. "Category 4 Data' is data that is confidential and requires special handling due to statutes or <br />regulations that require especially strict proteetion of the data and from which especially sericrus <br />consequences nlay arise in the event of any compromis* of such data. Data classified as Category <br />4 includes bui is rtot lirnited tei data protect*ci by: ihe Healih lnsurance Portabiliiy and Accauntability <br />Acl (HlPA,A), Pub. L. 104-191 as anreneled by the Health lnfonnation Technalogy for [conomic ancj <br />ClinicalHealth Act of 2009 (HITECH), 45 CFR Paris'160 and 164;the Farnily f;ducational Righis <br />and PrivacyAct (FERPA), ?0 U.S.C^ $12329; 34 CFR Part09; lnternal Reyenue $ervice <br />Publication 1075 ($l!l,tiljp'yq'.{'lf!i$t]dr::!]ljlii$_:fftt&r-t-J;l$ffi; $ulrstance Abuse and Mentai Heatth <br />Services Administraiion regulations on Confidentiality of Alcoholand Drug Alrus* Fatienl Records, <br />42 CFR Part 2: andlor Oilminal Jusiice lnformalion $ervices. 28 CFR Part 20. <br />Depart''ner']t *f Clrildre n, Youilr l" F.*milie* <br />?0l7Cf Cornty Progrunr Agreement (,9-1-?01S)Page 6