Laserfiche WebLink
Docusign Envelope ID: 72A916313-BEA11-46FE-ACDD-146671 B87804 <br />EXHIBIT 2 <br />2. PRIVACY AND CONFIDENTIALITY <br />a. The County staff, contractors, subcontractors and vendors, covered by this Agreement <br />may use or disclose PH only as permitted in this Agreement and only to assist in the <br />administration of programs in accordance with 45 CFR § 205.50 et. seq and Welfare and <br />Institutions Code section 10850, and Section 14100.2 of the Welfare and Institutions <br />Code, Section 431.300 et. Seq. of Title 42 Code of Federal Regulations, or as authorized <br />or required by law. Disclosures, which are authorized or required by law, such as a court <br />order, or are made with the explicit written authorization of the individual, who is the <br />subject of the PII, are allowable. Any other use or disclosure of PH requires the express <br />approval in writing by County of Orange. No Contractor Staff shall duplicate, <br />disseminate or disclose PH except as allowed in this Agreement. <br />b. Pursuant to this Agreement, Contractor Staff may only use PH to perform administrative <br />functions related to administering their respective programs. <br />c. Access to PII shall be restricted to Contractor Staff who need to perform their official <br />duties to assist in the administration of their respective programs. <br />d. Contractor Staff who access, disclose or use PH in a manner or for a purpose not <br />authorized by this Agreement may be subject to civil and criminal sanctions contained <br />in applicable federal and state statutes. <br />3. PERSONNEL CONTROLS <br />The County agrees to advise Contractor Staff, who have access to PII, of the confidentiality <br />of the information, the safeguards required to protect the information, and the civil and <br />criminal sanctions for non-compliance contained in applicable federal and state laws. For <br />that purpose, the Contractor shall implement the following personnel controls: <br />a. Employee Training. Train and use reasonable measures to ensure compliance with the <br />requirements of this Agreement by Contractor Staff, including, but not limited to: <br />i. Provide initial privacy and security awareness training to each new Contractor Staff <br />within thirty (30) days of employment and; <br />ii. Thereafter, provide annual refresher training or reminders of the privacy and <br />OA <br />City Council 7 —118 7/15/2025 <br />