Laserfiche WebLink
Pocusign Envelope ID,72A31 B3B-J3EA9-46FE~-ACDD•14667rl l387804 <br /> 2. PRIVACY AND CONFIDENTIALITY <br /> a. The County staff, contractors, subcontractors and vendors, covered by this Agreement <br /> may use or disclose PII only as permitted in this Agreement and only to assist in the <br /> administration of programs in accordance with 45 CFR § 205.50 et, seq and Welfare and <br /> Institutions Code section 10850, and Section 14100.2 of the Welfare and Institutions <br /> Code,Section 431.300 et. Seq. of Title 42 Code of Federal Regulations, or as authorized <br /> or required by law. Disclosures,which are authorized or required by law, such as a court <br /> order, or are made with the explicit written authorization of the Individual,who is the <br /> subject of the PH,are allowable. Any other use or disclosure of PH requires the express <br /> approval in writing by County of Orange. No Contractor Staff shall duplicate, <br /> disseminate or disclose PH except as allowed in this Agreement. <br /> b. Pursuant to this Agreement, Contractor Staff may only use PH to perform administrative <br /> functions related to administering their respective programs. <br /> c. Access to PH shall be restricted to Contractor Staff who need to perform their official <br /> duties to assist in the administration of their respective programs. <br /> d. Contractor Staff who access, disclose or use PH in a manner or for a purpose not <br /> authorized by this Agreement may be subject to civil and criminal sanctions contained <br /> in applicable federal and state statutes. <br /> 3. PERSONNEL CONTROLS <br /> The County agrees to advise Contractor Staff, who have access to Pil, of the confidentiality <br /> of the information, the safeguards required to protect the information, and the civil and <br /> criminal sanctions for non-compliance contained in applicable federal and state laws. For <br /> that purpose,the Contractor shall implement the following personnel controls: <br /> a. Employee Training. Train and use reasonable measures to ensure compliance with the <br /> requirements of this Agreement by Contractor Staff, including, but not limited to: <br /> 1. Provide initial privacy and security awareness trainingto each new Contractor Staff <br /> within thirty 130j days of employment and; <br /> ii. Thereafter, provide annual refresher training or reminders of the privacy and <br /> 2 <br />