At Work - Laserfiche WebLink

Home Browse Search

25.3 25.4 Professional Services Agreement Page 12 25.2.1Allowing access only to staff that have an authorized business requirement to view the confidential information. 25.2.2 Physically securing any computers, documents, or other media containing the Confidential lnformation. 25.2.3 Ensure the security of Confidential lnformation transmitted via fax (facsimile) by verifying the recipient phone number to prevent accidental transmittal of Confidential lnformation to unauthorized persons. 25.2.4 When transporting six (6) to one hundred forty nine (149) records containing Confidential lnformation outside a Secure Area, do one or more of the following as appropriate: 25.2.4(1) Use a Trusted System 25.2.4(2) EncrypttheConfidential lnformation, including 25.2.4(2)(i) Email and/or email attachments. 25.2.4(2)(ii) Confidential lnformation when it is stored on portable devices or media, including but not limited to laptop computers and flash memory devices. 25.2.5 When transporting one hundred fifty (150) records or more containing Confidential lnformation outside a Secure Area refer to the requirements in Attachment D, Exhibit A: Data Security Requirements. 25.2.6 Send paper documents containing Confidential lnformation via a Trusted System To the extent allowed by law, at the end of the Agreement term, or when no longer needed, the parties shall return Confidential lnformation or certify in writing the destruction of Confidential lnformation upon written request by the other party. Paper documents with Confidential lnformation may be recycled through a contracted firm, provided the contract with the recycler specifies that the confidentiality of the information will be protected, and the information destroyed through the recycling process. Paper documents containing Confidential lnformation requiring special handling (e.g. protected health information) must be destroyed through shredding, pulping or incineration.