Privacy and Security Practices Clause Samples

Privacy and Security Practices. Each HSP shall: (a) with the support of audit logs provided by CAMH, have logging, auditing and monitoring policies and procedures including communication of these controls to Authorized Users; (b) have an incident management process to identify, escalate, investigate and report any privacy and/or security incident relating to the Data in the Repository which affects the HSP’s Clients, such process to interface with and support the CBI incident management process; (c) have a process to handle Client requests to access, or correct their PHI, or challenge the HSP’s privacy practices. Any such requests must be communicated to CAMH at the first reasonable opportunity; (d) have a process to handle a Client’s request to not share their PHI and to withdraw their consent for sharing PHI (Lockbox), and to the extent that this impacts the Data, communicate this immediately to CAMH; (e) keep Shared Client Data confidential and secure and use the same degree of care to protect such Data, as the HSP uses to protect its PHI of a like nature, but in any event, in maintaining such Shared Client Data confidential and secure, it shall not use a standard of care that is less than a reasonable standard of care; (f) access the Data only in compliance with this DSA and Applicable Legislation; (g) take reasonable steps to ensure the physical, administrative, and technological security of PHI in its custody or control and to prevent theft, loss and unauthorized access, copying, modification, use, disclosure or disposal of PHI; (h) maintain such policies, procedures and systems as necessary to prevent unauthorized persons from having access to, collecting, using, disclosing, modifying, disposing, copying, stealing or otherwise committing any other act that could breach or compromise the confidentiality, availability, accessibility, integrity, structure, format or content of the PHI of a Client that has been uploaded into the Repository by another HSP, or the privacy of that Client; (i) ensure that its Agents, including its Authorized Users, are aware of and comply with the requirements of this DSA with respect to the sharing of PHI through the Repository; (j) be responsible for notifying its Clients of any inappropriate use, access, disclosure, theft or loss of any PHI in its custody; and (k) provide training to its Agents, including its Authorized Users, with respect to their legal obligations relating to privacy and PHI generally.

Privacy and Security Practices. Coolset operates and handles Customer Information solely as necessary to fulfill its obligations, commitments, and purposes described under this Agreement (“MSA”) and the order form (“Order Form”), and in compliance with the General Data Protection Regulation (GDPR) and according to the privacy policy available at ▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇/legal/privacy (the “Privacy Policy”). Coolset’s current trust, security, and data protection practices are set forth at ▇▇▇▇▇://▇▇▇▇▇.▇▇▇▇▇▇▇.▇▇▇ (the “Trust Center”), which details the measures Coolset takes to protect the security, confidentiality, and integrity of Customer Information, among others.

Privacy and Security Practices. Xenegrade shall maintain privacy and confidentially for all data of Licensee. Xenegrade may access the data of Licensee for performing corporate activities including, but not limited to: quality improvement, customer service, auditing, business planning and development, and general administrative duties. All the data recorded in XenDirect is owned by the Licensee and Xenegrade will not sell or distribute any of the Licensee’s data.

Privacy and Security Practices. ▇▇▇▇▇▇ ▇▇▇▇▇▇▇▇’▇ privacy and security practices are explained in ▇▇▇▇▇▇ ▇▇▇▇▇▇▇▇’▇ Privacy Statement, as amended from time to time. You agree that ▇▇▇▇▇▇ ▇▇▇▇▇▇▇▇ is entitled to monitor your use of this website for the purpose of enforcing the restrictions in Section 5 and to maintain the privacy and security of this website.

Privacy and Security Practices