Orange County NC Website
DocuSign Envelope ID: BDDDD430-E4C8-4429-B240-4E14BF7C5CC7 <br /> It is understood that the HMIS will contain client information that may be subject to the privacy <br /> and security protections and requirements of federal HMIS Standards, HIPAA Privacy Rule, other <br /> law, and local HMIS privacy and security policies and procedures.The HMIS Lead Agency hereby <br /> agrees that it will use protected client information only for purposes permitted by agreement <br /> with Partner Agencies and as permitted by the applicable laws and standards. Further,the HMIS <br /> Lead Agency agrees it will make use of all safeguards required by HUD Privacy Standards, HIPAA <br /> Privacy Rule (where appropriate), other law, and local HMIS privacy and security policies and <br /> procedures to prevent any unauthorized disclosure of protected client information. <br /> 4. Software Vendor <br /> The selected software vendor and HMIS database must meet all HUD regulations and policies, and the <br /> following requirements: <br /> a) Ensure the HMIS design meets the federal HMIS Data Standards. <br /> b) Develop a codebook and provide other documentation of programs created. <br /> c) Provide ongoing support to the HMIS Lead pertaining to the needs of end users to mine the <br /> database,generate reports, and other interface needs. <br /> d) Administer the product servers, including web and database servers. <br /> e) Monitor access to HMIS through auditing. <br /> f) Monitor functionality, speed, and database backup procedures. <br /> g) Provide backup and recovery of internal and external networks. <br /> h) Maintain the system 24 hours a day, seven days a week. <br /> i) Communicate any planned or unplanned interruption of service to the HMIS Lead Agency. <br /> j) Take all steps needed to secure the system against breaches of security and system crashes. <br />