Orange County NC Website
6 <br />appointing a qualified project leader to manage CLIENT’s responsibilities and <br />coordinate with UNCHCS regarding the implementation and other activities under <br />this Agreement; (ii) appointing and procuring training for at least one employee to <br />serve as CLIENT’s “Super User” in fielding day-to-day questions and issues <br />encountered by CLIENT’s end users; (iii) maintaining internal business continuity <br />and disaster recovery procedures, consistent with EMR System business continuity <br />functionality, in the event of unavailability of the EMR System for any reason; (iv) <br />testing and validating the EMR System for use in CLIENT’s business, including <br />compatibility with CLIENT’s culture, policies, procedures and operations; and (v) <br />assigning a project team and point-of-contact for each application area within the <br />EMR System. <br />4.3 Authorized Users. In order to remotely access and use the EMR System, CLIENT <br />must set up and manage user accounts for each of its Authorized Users in <br />accordance with UNCHCS’s standard policies and procedures. As part of its initial <br />access request hereunder, CLIENT will provide UNCHCS with the name and <br />contact information of CLIENT’s Privacy Officer and/or Administrator <br />(“Administrator”) and notify UNCHCS of any change in such contact(s). The <br />Administrator will coordinate the Authorized Users’ access to the EMR System <br />hereunder, if granted, with UNCHCS Registration. The Administrator is <br />responsible for managing the initiation, changes and termination of any Authorized <br />User user accounts created for such access if granted. Each account may be used <br />only by the individual authorized by CLIENT. CLIENT is solely responsible for <br />the selection of its Authorized Users, all use of user IDs and passwords assigned to <br />or chosen by Authorized Users, the implementation and maintenance of security <br />relating to access to the EMR System through CLIENT’s facility, and all activities <br />occurring under its user accounts. CLIENT shall ensure that such Authorized Users <br />(i) keep any and all usernames, passwords and account information confidential, <br />private and secure, (ii) use only the usernames, passwords and account information <br />assigned to them and (iii) not share usernames, passwords and account information <br />with any other person or entity including, without limitation, any other CLIENT <br />personnel. CLIENT shall notify UNCHCS immediately in the event of any known <br />or suspected misuse of any usernames, passwords and account information. <br />UNCHCS reserves the right to temporarily suspend access to the EMR System <br />and/or any user account, but only if such suspension is necessary to protect the <br />security and integrity of the EMR System. In connection with any such suspension <br />of access, UNCHCS shall contact CLIENT ’s designated representative by email or <br />telephone and await CLIENT’s response for at least thirty (30) minutes before <br />suspending access, where feasible and appropriate, and in any event shall promptly <br />contact CLIENT to coordinate an appropriate resolution. <br />4.4 Compliance with Laws. CLIENT is responsible for all use of the EMR System by <br />its Authorized Users. CLIENT represents and warrants that it shall comply with: <br />(a) all reasonable remote access and network security requirements communicated <br />by UNCHCS from time to time; and (b) all applicable federal, state or local laws <br />and regulations and rules of professional conduct. CLIENT shall not use or enable <br />its Authorized Users to use the EMR System (i) in violation of any applicable <br />8