Agenda Packet_2025-07-15 - Laserfiche WebLink

Home Browse Search

Oocusign Envelope ID: 72A91B36-BEA1-46FE-ACDO-146571687804 EXHIBIT 2 to comply with the applicable privacy and security requirements, which is available upon request. If there is any conflict between a privacy and security standard in the CMA and a standard in this Agreement, the most stringent standard shall apply. The most stringent standard means the standard which provides the greatest protection to PII. 14. CONTRACTOR AGENTS. SUBCONTRACTORS, ,AND VENDORS The Contractor agrees to enter into written agreements with all agents, subcontractors, and vendors that have access to the Contractor's PII. These agreements will impose, at a minimum, the same restrictions and conditions that apply to the Contractor with respect to PII upon such agents, subcontractors, and vendors. These shall include, at a minimum, (1) restrictions on disclosure of PII, (2) conditions regarding the use of appropriate administrative, physical, and technical safeguards to protect P11, and, where relevant, (3) the requirement that any breach, security incident, intrusion, or unauthorized access, use, or disclosure of PII be reported to the Contractor. If the agents, subcontractors, and vendors of the Contractor access data provided to the County by SSA or DHS-USCIS, the Contractor shall also incorporate the Agreement's Exhibits into each subcontract or subaward with agents, subcontractors, and vendors. 15. ASSESSMENTS AND REVIEWS In order to enforce this Agreement and ensure compliance with its provisions, the Contractor agrees to assist the County (on behalf of CDSS and DHCS) in performing compliance assessments. These assessments may involve compliance review questionnaires, and/or review of the facilities, systems, books, and records of the Contractor, with reasonable notice from the County. Such reviews shall be scheduled at times that take into account the operational and staffing demands. The Contractor agrees to promptly remedy all violations of any provision of this Agreement and certify the same to the County in writing, orto enter into a written CAP (Corrective Action Plan) with the County containing deadlines for achieving compliance with specific provisions of this Agreement. 16. ASSISTANCE IN LITIGATION OR ADMINISTRATIVE PROCEEDINGS In the event of litigation or administrative proceedings involving the County based upon claimed violations by the Contractor of the privacy or security of PII, or federal or state laws or agreements concerning privacy or security of PII, the Contractor shall make all reasonable 15 City Council 7 — 131 7/15/2025