Orange County NC Website
Browse       Search
c. Division of State-owned Hospital Facilities("DSOHF") <br /> d. HIV Case Management Providers <br /> e. Hospital and Hospital Systems <br /> f. Local Management Entity/Managed Care Organization ("LME/MCO") <br /> g. Primary Care Provider("PCP"), Group Practices <br /> h. Subcontractor <br /> If Participant does not clearly fit into one of the categories a-g, Participant will be deemed to be in <br /> category h regardless of any similarities or dissimilarities Participant has to other categorizations. <br /> 9. General Obligations Applicable to Participant. Participant is responsible for its Participating Entities <br /> and Authorized Users, including any breach of this Agreement by its Participating Entities or <br /> Authorized Users or by anyone using participant's facilities or any equipment or software owned, <br /> leased,or controlled by Participant to access or use the Data Platform or the Data, including for any <br /> purpose other than a Permitted Purpose. In recognition of these obligations,Participant agrees to: <br /> a. Follow all Applicable Law. <br /> b. Work with designated care managers and other N3CN and Subcontractor staff under the PCCM <br /> Program to enhance continuity of care for Enrollees and to help promote self-management of <br /> physical and behavioral health conditions for Enrollees. <br /> c. Ensure its Authorized Users have all necessary equipment, software, and other resources to <br /> access and use the Data Platform and the Data in accordance with the technical and operational <br /> specifications provided by N3CN. <br /> d. Ensure Participant's Representatives, Participating Entities, and Authorized Users access and use <br /> the Data Platform and access,use,store,maintain,and transfer Data only for Permitted Purposes <br /> and consistent with all Applicable Law. <br /> e. Maintain and provide to N3CN as requested an ongoing list of all Participating Entities and <br /> Authorized Users of Participant. <br /> f. Monitor all access and use of the Data Platform and all access, use, storage, maintenance, and <br /> transfer of Data occurring at any location owned, leased, or controlled by Participant or any <br /> Authorized User of Participant,or occurring through equipment under the ownership or control <br /> of Participant or any Authorized User of Participant. <br /> g. Implement and maintain reasonable administrative,technical,and physical safeguards to protect <br /> the confidentiality,integrity,and availability of the Data Platform and the Data. <br /> i. Administrative safeguards must include written policies and procedures for managing access, <br /> use, storage, maintenance, transfer, and disclosure of Data and access and use of the Data <br /> Platform and must include sanctions for any violations of those policies and procedures. <br /> ii. `technical safeguards must include appropriate security lockouts,password management, data <br /> encryption, and related mechanisms to ensure the privacy and security of the Data Platform <br /> and the Data. <br /> iii. Physical safeguards must include restricted access to places where the Data Platform may be <br /> accessed or used, and where the Data may be accessed, used, stored, maintained, or <br /> transferred. <br /> Page 7 of 21 <br />