Res 2018-113/approving a contract between the City and the Texas Department of State Health Services, Vital Statistics Unit, for the provision of on-line vital statistic computer services for the City

Home Browse Search

System Agency Contract No.HHSREV100001023 k. Identify, describe or estimate of the Persons, Workforce, Subcontractor, or Individuals and any law enforcement that may be involved in the Event or Breach; 1. A reasonable schedule for Contractor to provide regular updates to the foregoing in the future for response to the Event or Breach, but no less than every three (3) business days or as otherwise directed by System Agency, including information about risk estimations, reporting, notification, if any, mitigation, corrective action, root cause analysis and when such activities are expected to be completed; and in. Any reasonably available, pertinent information, documents or reports related -to an Event or Breach that System Agency requests following Discovery. Section 4.02 Investigation, Response and Mitigation. For A -F below: 45 CFR 164.308, 310 and 312; 164.530 (A) Contractor will immediately conduct a full and complete investigation, respond to the Event or Breach, commit necessary and appropriate staff and resources to expeditiously respond, and report as required to and by System Agency for incident response purposes and for purposes of System Agency's compliance with report and notification requirements, to the satisfaction of System Agency. (B) Contractor will complete or participate in a risk assessment as directed by System Agency following an Event or Breach, and provide the final assessment, corrective actions and mitigations to System Agency for review and approval. (C) Contractor will fully cooperate with System Agency to respond to inquiries and proceedings by state and federal authorities, Persons and Individuals about the Event or Breach. (D) Contractor will fully cooperate with System Agency's efforts to seek appropriate injunctive relief or otherwise prevent or curtail such Event or Breach, or to recover or protect any Confidential Information, including complying with reasonable corrective action or measures, as specified by System Agency in a Corrective Action Plan if directed by System Agency under the Base Contract. Section 4.03 Breach Notification to bidividuals and Reporting to Authorities. Tex. Bus. & Contnt. Code §521.053; 45 -CFR 164.404 andividuals),164.406 (Media); 164.408 (Authorities) (A) System Agency may direct Contractor to provide Breach notification to Individuals, regulators or third -parties, as specified by System Agency following a Breach. (B) Contractor must obtain System Agency's prior written approval of the time, manner and content of any notification to Individuals, regulators or third -parties, or any notice required by other state or federal authorities. Notice letters will be in Contractor's name and on Contractor's letterhead, unless otherwise directed by System Agency, and will contain contact information, including the name and title of Contractor's representative, an email address and a toll-free telephone number, for the Individual to obtain additional information. (C) Contractor will provide System Agency with copies of distributed and approved communications. (D) Contractor will have the burden of demonstrating to the satisfaction of System Agency that any notification required by System Agency was timely made. If there are delays outside of Contractor's control, Contractor will provide written documentation of the reasons for the delay. System Agency Data Use Agreement V.8.3 HIPAA Omnibus Compliant April 1, 2015 Page 8 of 11