A13 Attachment 4 - Non disclosure.docx

ATTACHMENT 4, NON-DISCLOSURE AND RECORDS PROTECTION AGREEMENT

U.S. DEPARTMENT OF HEALTH AND HUMAN SERVICES OFFICE OF INSPECTOR GENERAL

Req #: OIG254346

I understand that, as a contract employee and in the course of my assignment under contract to provide expert services for the U.S. Department of Health and Human Services, Office of Inspector General (OIG), I may have access to personally identifiable information (PII) and health information regarding patients as defined more fully below.

I will not disclose, for any purpose other than in the performance of my assignment under contract to provide expert services to OIG, any PII or other confidential information obtained as a result of performance under this contract to any outside activity/individual, unless so directed by an OIG attorney, in writing. If during the course of the performance of my duties under this contract, I become aware of a breach of my computer systems or unintended release or disclosure of PII or other confidential information, I will immediately report the breach, release, or disclosure to OIG’s Information Systems Security Office by sending an email to isso@oig.hhs.gov, so that the breach may be reported in accordance with HHS Policy for Information Technology Security and Privacy Incident Reporting and Response, Policy 2010- 0004-OCIO.

PII is defined as any information about an individual maintained by an agency or its contractor, including (1) any information that can be used to distinguish or trace an individual’s identity, such as name, social security number, date and place of birth, mother’s maiden name, or biometric records; and (2) any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information. Confidential information in the context of this agreement includes, but is not limited to, home addresses, home telephone numbers, private email addresses, as well as confidential health information.

Any information made available by OIG in any format shall be used only for the purpose of carrying out the provisions of the contract. Information contained in such materials shall not be divulged or made known in any manner to any person except as may be necessary in the performance of the contract. Disclosure to anyone, including other officers or employees of the Contractor, shall require written approval of the assigned attorney(s) of the Office of Counsel to the Inspector General (OCIG).

I agree to use and examine such information exclusively in the performance of work required to carry out my duties associated with the contract to which I am assigned, and agree to take suitable steps to prevent the disclosure of such information to any parties other than those performing this contract. At the conclusion of my expert services for OIG, or at the request of the OIG, I agree to surrender all confidential information gathered or generated during my assignment. I have no ownership right or right to possess such data and information except to fulfill specific contract work assignments. The rights and obligations of the parties to this agreement shall not be assignable or used to the benefit of third parties.

I agree that I will not use or disclose to any third party any PII or security information acquired through assignment under this contract at any time following my performance on the contract. I further agree that I will report to the assigned OCIG attorney(s) any known or suspected violations of the procedures established under this Agreement for the protection of PII.

I agree that I will not release, publish, or disclose information from OIG files or records to unauthorized persons, and that I must protect such information in accordance with 18 U.S.C § 641 and § 2071, or risk criminal penalties.

I, the undersigned, have read, fully understand, and will abide by this agreement.

Signature: Date:

Printed Name: