Item 26 - Agreement with Allied Network Solutions, Inc. for Adobe Software and Subscription

Home Browse Search

E. Corporate Policies Employees must exercise utmost caution when sending faxes to parties outside of Virtru. Faxes containing Personally -Identifiable Information should only be received on and sent to user or departmental specific fax machines and not to systems that have general access. In cases where Personally -Identifiable Information is received from outside on a non - departmental specific fax machine, the receiving department shall notify the Virtru Privacy Officer of the source of such information. The employee shall communicate the approved fax number to the external entity and record such actions. Should PHI be disclosed by fax to an inappropriate party, Virtru shall, to the extent possible, remediate such disclosures. All fax documents sent by Virtru employees shall contain the following statement: This fax is intended for the individual/individuals or entity/entities named above and may be covered by copyrights, business partner confidentiality agreements, non -disclosures or other legally binding instruments. If you are not the intended recipient, do not read, copy, use or disclose the contents of this communication to others. Immediately notify the sender by reply fax, destroy all hard copies and delete this document from all systems. Thank you! F. Procedure In the cases where data that contains Personally -Identifiable Information is disclosed by fax machine use to an inappropriate party, the following procedure shall be followed: 1. The receiving party shall be contacted by telephone at the earliest opportunity and requested to destroy the fax without reading. 2. The name of the company, the person contacted, the date and time shall be recorded as well as any comments made by the person receiving such calls. 3. A fax shall also be sent to the receiving party containing the same instructions as detailed for the phone call requesting a return fax message indicating that the requested action was taken. 4. The cause of the inappropriate disclosure shall be determined and reported to the Virtru Privacy Officer. Methods to prevent a reoccurrence of the inappropriate disclosure shall be formulated and put into place. Any additional actions prescribed by regulations shall be performed to the extent possible. G. Enforcement Any employee found to have violated this policy shall be subject to disciplinary action, up to and including termination of employment. In the case where inappropriate access, use Rev.2015.8.25 22