Laserfiche WebLink
https:Hocio.wa.gov/policies/141-securing-information-technology-assets/14110-securing-information- <br />technology-assets. Section 4 is hereby incorporated by reference.) <br />The Data that is the subject of this Contract is classified as indicated below: <br />❑ Category 1 — Public Information <br />Public information is information that can be or currently is released to the public. It does not need <br />protection from unauthorized disclosure, but does need integrity and availability protection controls. <br />❑ Category 2 — Sensitive Information <br />Sensitive information may not be specifically protected from disclosure by law and is for official use only. <br />Sensitive information is generally not released to the public unless specifically requested. <br />❑ Category 3 — Confidential Information <br />Confidential information is information that is specifically protected from disclosure by law. It may include <br />but is not limited to: <br />a. Personal Information about individuals, regardless of how that information is obtained; <br />b. Information concerning employee personnel records; <br />c. Information regarding IT infrastructure and security of computer and telecommunications <br />systems; <br />® Category 4 — Confidential Information Requiring Special Handling <br />Confidential information requiring special handling is information that is specifically protected from <br />disclosure by law and for which: <br />a. Especially strict handling requirements are dictated, such as by statutes, regulations, or <br />agreements; <br />b. Serious consequences could arise from unauthorized disclosure, such as threats to health and <br />safety, or legal sanctions. <br />4. Constraints on Use of Data/Limited License <br />4.1. Subject to the Terms and Conditions of this Contract, HCA hereby grants Contractor a limited <br />license for the access and Permissible Use of Data. This grant of access may not be deemed as <br />providing Contractor with ownership rights to the Data. The Data being shared/accessed is owned <br />and belongs to HCA. <br />4.2. Data shared under this Contract includes data protected by 42 C.F.R. Part 2. In accordance with 42 <br />C.F.R. § 2.32, this Data has been disclosed from records protected by federal confidentiality rules <br />(42 C.F.R. Part 2). The federal rules prohibit Contractor from making any further disclosure(s) of the <br />Data that identifies a patient as having or having had a substance use disorder either directly, by <br />reference to publicly available information, or through verification of such identification by another <br />person unless further disclosure is expressly permitted by the written consent of the individual <br />whose information is being disclosed or as otherwise permitted by 42 C.F.R. Part 2. A general <br />authorization for the release of medical or other information is NOT sufficient for this purpose (42 <br />C.F.R. § 2.31). The federal rules restrict any use of the SUD data to investigate or prosecute with <br />Washington State <br />Health Care Authority Page 9 HCA Contract No. K5885-1 <br />