DATA BREACH SERVICES

The County of Orange has awarded a contract to Securance, LLC for Data Breach Services. The contract is for a period of 5 years, starting from November 7, 2024, and ending on November 6, 2029. The scope of work includes providing data breach services to the County, and the contractor is required to comply with the HIPAA Security Rule and establish and maintain appropriate Administrative, Physical, and Technical Safeguards to protect electronic Protected Health Information (PHI). The contract also includes provisions for breach discovery and notification, and the contractor is required to report any security incidents or breaches to the County immediately. Some key points about the job’s work and scope-of-work include: • The contractor must provide data breach services to the County, including incident response and remediation. • The contractor must comply with the HIPAA Security Rule and establish and maintain appropriate Administrative, Physical, and Technical Safeguards to protect electronic PHI. • The contractor must report any security incidents or breaches to the County immediately. • The contractor must provide access to PHI in a Designated Record Set to the County or an Individual, as directed by the County. • The contractor must make any amendments to PHI in a Designated Record Set that the County directs or agrees to. The contract also includes provisions for permitted uses and disclosures of PHI by the contractor, and the contractor is required to use or disclose PHI only as necessary to perform functions, activities, or services for, or on behalf of, the County.