Laserfiche WebLink
WDM0522 Page 35 of 45 March 1, 2022 <br /> <br />and/or correcting weaknesses in security. <br /> Report to COUNTY the nature of the Security Breach, the <br />COUNTY data used or disclosed, the person who made the <br />unauthorized use or received the unauthorized disclosure, what <br />CONTRACTOR has done or will do to mitigate any harmful <br />effect of the unauthorized use or disclosure, and the corrective <br />action CONTRACTOR has taken or will take to prevent future <br />similar unauthorized use or disclosure. <br />32.2.2 The COUNTY, at its sole discretion and on a case-by-case basis, will <br />determine what actions are necessary in response to the Security Breach <br />and who will perform these actions. Actions may include, but are not <br />limited to: notifications; investigation and remediation costs, including <br />notification of all whose personal information was disclosed; outside <br />investigation; forensics; counsel; crisis management; and credit <br />monitoring. In the event COUNTY determines CONTRACTOR will <br />conduct additional action(s), CONTRACTOR shall bear the costs. In the <br />event COUNTY conducts additional actions(s) arising out of or in <br />connection with a Security Breach, CONTRACTOR shall reimburse <br />COUNTY for costs associated to legally required actions. <br />32.3 Privacy and Confidentiality <br />32.3.1 CONTRACTOR may use or disclose Personally Identifiable Information <br />(PII) only as permitted in this Agreement and only to assist in the <br />administration of services in accordance with Title 45 CFR Section <br />205.50et seq. and WIC Section 10850 or as authorized or required by law. <br />Disclosures required by law or that are made with the explicit written <br />authorization of the client are allowable. Any other use or disclosure of <br />PII requires the express approval in writing of CDSS. CONTRACTOR <br />shall not duplicate, disseminate or disclose PII except as allowed in this <br />Agreement. <br />32.3.2 Access, disclosure or use of PII in a manner or for a purpose not authorized <br />by this Agreement may be subject to civil and criminal sanctions contained