Laserfiche WebLink
System Agency Contract No.HHSREV 100001023 <br />(3) Who has agreed in writing to be bound by the disclosure and use limitations pertaining to <br />the Confidential Information as required by this DUA. <br />"Confidential Information" means any communication or record (whether oral, written, <br />electronically stored or transmitted, or in any other form) provided to or made available to Contractor or that <br />Contractor may create, receive, maintain, use, disclose or have access to on behalf of System Agency that <br />consists of or includes any or all of the following: <br />(1) Client Information; <br />(2) Protected Health Information in any form including without limitation, Electronic <br />Protected Health Information or Unsecured Protected Health Information; <br />(3) Sensitive Personal Information defined by Texas Business and Commerce Code Ch. 521; <br />(4) Federal Tax Information; <br />(5) Personally Identifiable Information; <br />(6) Social Security Administration Data, including, without limitation, Medicaid <br />information; <br />(7) All privileged work product; <br />(8) All information designated as confidential under the constitution and laws of the State of <br />Texas and of the United States, including the Texas Health & Safety Code and the Texas Public <br />Information Act, Texas Government Code, Chapter 552. <br />"Legally Authorized Representative" of the Individual, as defined by Texas law, including as <br />provided in 45 CFR 435.923 (Medicaid); 45 CFR 164.502(g)(1) (HIPAA); Tex. Occ. Code § 151.002(6); <br />Tex. H. & S. Code § 166.164; Estates Code Ch. 752 and Texas Prob. Code § 3. <br />ARTICLE 3.CONTRACTOR'S DUTIES REGARDING CONFIDENTIAL INFORMATION <br />Section 3.01 Obligations of Contractor <br />Contractor agrees that: <br />(A) Contractor will exercise reasonable care and no less than the same degree of care <br />Contractor uses to protect its own confidential, proprietary and trade secret information to prevent any <br />portion of the Confidential Information from being used in a manner that is not expressly an Authorized <br />Purpose under this DUA or as Required by Law. 45 CFR 164.502(b) (1); 45 CFR 164.514(d) <br />(B) Contractor will not, without System Agency's prior written consent, disclose or allow <br />access to any portion of the Confidential Information to any Person or other entity, other than Authorized <br />User's Workforce or Subcontractors of Contractor who have completed training in confidentiality, <br />privacy, security and the importance of promptly reporting any Event or Breach to Contractor's <br />management, to carry out the Authorized Purpose or as Required by Law. <br />System Agency, at its election, may assist Contractor in training and education on specific or <br />unique System Agency processes, systems or requirements. Contractor will produce evidence of <br />completed training to System Agency upon request. 45 C.F.R. 164.308(a)(5)(i); Texas Health & Safety <br />Code §181.101 <br />(C) Contractor will establish, implement and maintain appropriate sanctions against any <br />member of its Workforce or Subcontractor who fails to comply with this DUA, the Base Contract or <br />applicable law. Contractor will maintain evidence of sanctions and produce it to System Agency upon <br />request.45 C.F.R. 164.308(a) (1) (ii) (C); 164.530(e); 164.410(b); 164.530(h)(1) <br />System Agency Data Use Agreement V.8.3 HIPAA Omnibus Compliant April 1, 2015 <br />Page 2 of I 1 <br />