Executed PSA Robin Read for DDAC Meeting Facilitation

Home Browse Search

25.3 25.4 Professional Services Agreement Page 12 25'2'l Allowing access only to staff that have an authorized business requirement to view the confidential information. 25.2.2 Physically securing any computers, documents, or other media containing the Confidential lnformation. 25'2.3 Ensure the security of Confidential lnformation transmitted via fax(facsimile) by verifying the recipient phone number to prevent accidental transmittal of Confidential lnformation to unaut'horized persons. 25,2.4 when transporting six (6) to one hundred forty nine (14g) records containing Confidential lnformation outside a Secure Area, do one or more of the following as appropriate: 25.2.4(1) Use a Trusted System 25.2.4(2) Encryptthe confidentiar rnformation, incruding: 25.2.4(2)(i) Email and/or emait attachments. 25.2.4(2)(ii) confidentiar rnformation when it is stored on poftable devices or media, including but not limited to laptop computers and flash memory devices. 25.2'5 When transporting one hundred fifty (150) records or more containingconfidential lnformation outside a secure Area refer to therequirements in Attachment D, Exhibit A: Data Security Requirements. 25'2.6 Send paper documents containing Confidential lnformation via a Trusted System To the extent allowed by law, at the end of the Agreement term, or when noIonger needed, the parties shall return Confidential lnformation or ."tt,ty inwriting the destruction of Confidential lnformation upon written request nyi6eother par1y. Paper documents with Confidential Information may be recycled through acontracted firm, provided the contract with the reiycler specifies that-theconfidentiality of the information will be protected, and the informationdestroyed through the recycling process. paper documents containingconfidential lnformation requiring special handiing (e.g. protected healthinformation) must be destroyed through shredding, furping or incineration.