RES-2022-148 - Laserfiche WebLink

Home Browse Search

regard to a crime any patient with a substance use disorder, except as provided at 42 C.F.R. gg 2.12(c)(5) and 2.65. 4.3.This Contract does not constitute a release of the Data for the Contractor's discretionary use. Contractor must use the Data received or accessed under this Contract only to carry out the purpose and justification of this Contract as set out in the Data Licensing Statement(s). Any analysis, use, or reporting that is not within the Purpose of this Contract is not permitted without HCA's prior written consent. 4.4. This Contract does not constitute a release for Contractor to share the Data with any third parties, including Subcontractors, even if for authorized use(s) under this Contract, without the third party release being approved in advance by HCA and identified in the Data Licensing Statement(s). 4.5. Derivative Data Product Review and Release Process. All reports derived from Data shared under this Contract, produced by Contractor that are created with the intention of being published for or shared with external customers (Data Product(s)) must be sent to HCA for review of usability, data sensitivity, data accuracy, completeness, and consistency with HCA standards prior to disclosure. This review will be conducted and response of suggestions, concerns, or approval provided to Receving Party within 10 business days, a. Small Numbers. Contractor will adhere to HCA Small Numbers Standards, Attachment 2. HCA and Contractor may agree to individual Permissible Use exceptions to the Small Numbers Standards, in writing (email acceptable), 4.6. Any disclosure of Data contrary to this Contract is unauthorized and is subject to penalties identified in law. 5. Data Modification(s) Any modification to the Purpose, Justification, Description of Data to be SharedlData Licensing Statement(s), and Permissible Use, is required to be approved through HCA's Data Request Process. Contractor must notify HCA's Contract Manager of any requested changes to the Data elements, Use, records linking needs, research needs, and any other changes from this Contract, immediately to start the review process. Approved changes will be documented in an Amendment to the Contract. 6. Security of Data 6.1. Data Protection The Contractor must protect and maintain all Confidential lnformation gained by reason of this Contract against unauthorized use, access, disclosure, modification or loss. This duty requires the Contractor to employ reasonable security measures, which include restricting access to the Confidential lnformation by a. Allowing access only to staff that have an authorized business requirement to view the Confidential I nformation. b. Physically securing any computers, documents, or other media containing the Confidential lnformation. 6.2. Data Security Standards Contractor must comply with the Data Security Requirements set out in Attachment 1 and the Washingtol OCIO Security Standard, 141^1A (httos:l/ocio.wa.qov/policies/141-securinq-information-technoloov- Washington State Health Care Authority Page 1A HCA Contract No. K5885-1