Attachment_6_-_Confidentiality_Statement.pdf

Attachment 6 National Institutes of Health Clinical Center, Medical Record Department Transcription of Medical Reports, Letters, and Pathology Reports

Information security and privacy, including the protection of sensitive/confidential information whether in verbal, written or electronic form, are a high priority of the National Institutes of Health (NIH).

Therefore, all contractors and the subcontractors, who may have access to any personally identifiable information, are subject to the rules, regulations and procedures established by the Privacy Act of 1974 (PA) and implementing regulations, as well as the Health Insurance Portability and Accountability Act of

1996 (HIPAA).

As such, all contractors and subcontractors shall only collect, maintain and use sensitive/confidential, personally identifiable information as necessary within the scope of the services to be provided to the NIH.

In addition, all contractor staff shall use sensitive/confidential information only in the performance of their assigned duties as related to the delivery of those services.

Information provided by the NIH may not be shared with any third-party without the express written permission of the Project and Contract Officers and may not be used for any purpose other than for the delivery of specific services to be provided to the NIH.

The unauthorized disclosure of any information protected by the PA or HIPAA may be punishable by administrative sanction or by fine and purposeful disclosure may result in criminal charges.

The contractor and subcontractors are required to submit a company security/confidentiality policy and related procedures, which are to include the requirement for a signed employee confidentiality agreement.

An example of a confidentiality agreement would be:

“I certify that I have read the ABC Company confidentiality policy and procedures. I further certify that I have had the opportunity to ask questions and that I understand my role and responsibilities as an employee of ABC Company in maintaining the security/confidentiality of all personally identifiable information to which I may have access. I agree to abide by all requirements of the policy as evidenced by my signature below.”

Employee Signature Company Representative Signature