Agenda Packet_2022-03-15 - Laserfiche WebLink

Home Browse Search

c. The Action Officer shall oversee notification of individuals affected by the breach or unauthorized use/disclosure of Medi-Cal PII when notification is required. d. The Action Officer shall engage Human Resource Services, County Counsel, Risk Management, and/or the County Executive Office as needed to determine if internal processes, such as disciplinary action, are necessary. e. At the conclusion of the investigation and completion of all required notifications and consultations regarding necessary internal processes, the Action Officer will send the completed PIR that includes all required documentation from the investigation to QST/COR at the SSACustodianofrecordsinbox@SSA.ocgov.com with the subject line "Final PIR [secure]." 7. The County Privacy Officer will submit the final PIR to DHCS as required. 8. QST/COR will retain the final PIR for all incident types. V. REFERENCES Compliance of this policy shall be in accordance with the: • For Loss of Medi-Cal PII: State of California Department of Health Care Services Privacy and Security Agreement https://www.dhcs.ca.gov/services/medi-cal/eli ig bility/letters/Documcnts/cl9-16.pdf For Loss of all other program PII: State of California Department of Social Services Privacy and Security Agreement https:Hcdss.ca. gov/Portals/9/ACL/2019/ 19-56E.pdf?ver--2019-07-02-07193 8-893 For Loss of Federal Tax Information (FTI): State of California Health and Human Services Agency Department of Social Services (CDSS) All County Letters No. 15-56 California SB 1386 Personal Information: Privacy California Civil Code 1798.29 Children and Family Services Division (CFS Policy F-0105), Confidentiality-CFS Client Records WQM0522 Page 5 of 6 March 1, 2022 City Council 20 — 79 3/15/2022