PSA betwen KVO and KCPHD - Laserfiche WebLink

Home Browse Search

25.2.1 Allowing access only to staff that have an authorized business requirement to view the confidential information. 25.2.2 Physically securing any computers, documents, or other media containing the Confidential Information. 25.2.3 Ensure the security of Confidential Information transmitted via fax (facsimile) by verifying the recipient phone number to prevent accidental transmittal of Confidential Information to unauthorized persons. 25.2.4 When transporting six (6) to one hundred forty nine (149) records containing Confidential Information outside a Secure Area, do one or more of the following as appropriate: 25.2.4(1) Use a Trusted System 25.2.4(2) Encrypt the Confidential Information, including: 25.2.4(2)(i) Email and/or email attachments. 25.2.4(2)(ii) Confidential Information when it is stored on portable devices or media, including but not limited to laptop computers and flash memory devices. 25.2.5 When transporting one hundred fifty (150) records or more containing Confidential Information outside a Secure Area refer to the requirements in Attachment D, Exhibit A: Data Security Requirements. 25.2.6 Send paper documents containing Confidential Information via a Trusted System 25.3 To the extent allowed by law, at the end of the Agreement term, or when no longer needed, the parties shall return Confidential Information or certify in writing the destruction of Confidential Information upon written request by the other party. 25.4 Paper documents with Confidential Information may be recycled through a contracted firm, provided the contract with the recycler specifies that the confidentiality of the information will be protected, and the information destroyed through the recycling process. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) must be destroyed through shredding, pulping or incineration. Professional Services Agreement Page 12