STATE OF CALIFORNIA DEPARTMENT OF REHABILITATION (2)

Home Browse Search

Contract #31317 City of Santa Ana AJCC S. Confidentiality A. Contractor agrees that any report or material created during the performance of this agreement will not be released to any source except as required by this agreement or otherwise authorized by DOR. B. Contractor agrees that any information obtained in the performance of this agreement is confidential and shall not be published or open to public inspection in any manner, except as authorized by DM C. Contractor agrees to maintain the confidentiality of any information concerning any consumers that the contractor may obtain in the performance of this agreement and specifically agrees to comply with the provisions applicable to such information as set forth in 34 Code of Federal Regulations, Section 361.38, title 9, California code of Regulations, Section 7140 et seq., and the Information Practices Act of 1977 (California Civil Code Section 1798 et seq.). D. Contractor agrees to report any security breach or information security incident involving DOR consumers' personal information to the DOR's Contract Administrator and the DOR's Information Security Officer. The DOR's Information Security Officer can be contacted via e-mail at isoinfo aC),dor.ca.gov. E. Security breaches or information security incidents that shall be reported include, but are not limited to: 1. Inappropriate use or unauthorized disclosure of DOR consumers' personal information by the Contractor or the Contractor's assignees. Disclosure methods include, but are not limited to, electronic, paper, and verbal. 2. Unauthorized access to DOR consumers' personal information. Information can be held in medium that includes, but is not limited to, electronic and paper. 3. Loss or theft of information technology (IT) equipment, electronic devices/media, paper media, or data containing DOR consumers' personal information. IT equipment and electronic devices/media include, but are not limited to, computers (e.g., laptop and desktop, netbooks, tablets), smartphones, cell phones, CDs, DVDs, USB flash drives, servers, printers, peripherals, assistive technology devices (e.g., notetakers, videophones), and copiers. Data can be held in medium that includes, but is not limited to, electronic and paper. F. Contractor agrees to provide annual security and privacy training for all Individuals who have access to personal, confidential, or sensitive information relating to the performance of this agreement. Exhibit D