Laserfiche WebLink
hltos:/locio.wa.qovlpoliciesll4l-securinq-information-technoloov-assetsl14110-securino-information- <br />technoloqv-assets. Section 4 is herebv incorporated bv reference.) <br />The Data that is the subject of this Contract is classified as indicated below: <br />D Category 1 - Public lnformation <br />Public information is information that can be or currently is released to the public. lt does not need <br />protection from unauthorized disclosure, but does need integrity and availability protection controls <br />tr Category 2 - Sensitive lnformation <br />Sensitive information may not be specifically protected from disclosure by law and is for official use only <br />Sensitive information is generally not released to the public unless specifically requested. <br />D Category 3 - Confidential lnformation <br />Confidential information is information that is specifically protected from disclosure by law. lt may include <br />but is not limited to: <br />a. Personal lnformation about individuals, regardless of how that information is obtained; <br />b. lnformation concerning employee personnel records; <br />c. lnformation regarding lT infrastructure and security of computer and telecommunications <br />systems; <br />X Category 4 - Confidential lnformation Requiring Special Handling <br />Confidential information requiring special handling is information that is specifically protected from <br />disclosure by law and for which: <br />a. Especially strict handling requirements are dictated, such as by statutes, regulations, or <br />agreements; <br />b. Serious consequences could arise from unauthorized disclosure, such as threats to health and <br />safety, or legal sanctions. <br />4. Constraints on Use of Data/Limited License <br />4.1, Subject to the Terms and Conditions of this Contract, HCA hereby grants Contractor a limited <br />license for the access and Permissible Use of Data. This grant of access may not be deemed as <br />providing Contractor with ownership rights to the Data. The Data being shared/accessed is owned <br />and belongs to HCA. <br />4.2 Data shared under this Contract includes data protectedby 42 C.F.R. Part2.ln accordance with 42 <br />C.F.R. S 2.32, this Data has been disclosed from records protected by federal confidentiality rules <br />(42 C.F.R. Part 2). The federal rules prohibit Contractor from making any further disclosure(s) of the <br />Data that identifies a patient as having or having had a substance use disorder either directly, by <br />reference to publicly available information, or through verification of such identification by another <br />person unless further disclosure is expressly permitted by the written consent of the individual <br />whose information is being disclosed or as otherwise permittedby 42 C.F.R. Paft2. A general <br />authorization for the release of medical or other information is NOT sufficient for this purpose (42 <br />C.F.R. S 2.31). The federal rules restrict any use of the SUD data to investigate or prosecute with <br />Wasf,hgfon Slate <br />Haalth Care Authority Page 9 HCA Contraet No. K5885-1