Common use of Unique User Identification Clause in Contracts

Unique User Identification. 1. UM shall provide the Internal Monitor with a plan to require a unique name and/or number identifying and tracking users of all information systems that contain ePHI, including departmental shared network drives. UM shall provide the plan to require a unique user name and/or number to the Internal Monitor for review and approval within ninety (90) days of HHS’s approval of UM’s risk analysis and risk management plan required by Section V.B. 2. Within fifteen (15) days of receiving approval from the Internal Monitor, UM shall provide the plan to HHS for review and approval. Upon receiving notice from HHS specifying any required changes, UM shall make the required changes and provide the revised plan to HHS and the Internal Monitor within thirty (30) days. 3. Upon receiving approval of its plan from HHS, UM shall begin implementing the plan within thirty (30) days of receipt of HHS's approval. 4. UM shall provide the Internal Monitor with quarterly updates of the progress of the plan including documentation.