The County of Orange has awarded a contract to CDW Government LLC for the provision of an on-line marketplace for cloud services and software. The contract has a term of 5 years, starting from February 6, 2025, and ending on February 5, 2030. The contract involves the use and disclosure of protected health information (PHI), and the contractor is required to comply with the HIPAA Privacy Rule and Security Rule. The contract also includes provisions for breach notification, mitigation, and reporting. Some of the key features of the contract include:
• The contractor is required to use appropriate safeguards to prevent the use or disclosure of PHI.
• The contractor is required to report any breaches of unsecured PHI to the County.
• The contractor is required to mitigate any harmful effects of a breach.
• The contractor is required to provide access to PHI to the County or an individual, as directed by the County.
• The contractor is required to make any amendments to PHI as directed by the County.
• The contractor is required to maintain documentation of all required notifications of a breach.