• Community Council of Greater Dallas

    Security and privacy policy

  • Security and Privacy Policy

    Security and Privacy Training

     

    CCGD will hold annual trainings on security and privacy policies and procedures. Such trainings will be mandatory for all employees who handle confidential information including, but not limited to sensitive personal information, HHS confidential information and information covered by HIPPA.

     

    It shall be the responsibility of all Directors to assure that their staff who handle such information attend the training annually and to keep a record of attendance at such training. Failure to participate in such training shall be considered a performance issue and shall be addressed in accordance with CCGD’s progressive discipline policies as outlined in the most recent HR handbook.

     

    Any employee who fails to comply with CCGD’s policies and procedures and all signed Data Use Agreements regarding privacy and security shall be disciplined in accordance with CCGD’s progressive discipline policies as outlined in the most recent HR Handbook.

     

    Nondisclosure of Texas HHS Confidential Information

     

    Any document that is identified as HHS Confidential Information may not be disclosed except as allowed by the most current Data Use Agreement, the Base contract or with written permission from Texas HHS.

     

    In the event that relevant laws regarding confidential information disclosure are changed, or Texas HHS changes it policies and procedures or changes are made to the Data Use Agreement any of which necessitate a change in organizational policies and procedures, such changes shall be implemented within 60 days of notification of such changes.

     

    No Re-Identification or Further Identification of Texas HHS Confidential Information

     

    Person shall have permission to re-identify or further identify de-identified Texas HHS confidential information, nor shall any person have permission to contact any individuals whose records are contained in the HHS confidential information without express written authorization from a Texas HHS agency or as expressly permitted by the Base contract.

     

    Non-disclosure of confidential information

     

    Any applicant or bidder’s work product done on behalf of HHS pursuant to the DUA must designate the portions of the work product that it considers confidential and all such information that is marked confidential may not be disclosed without the express written permission of HHS unless such information is ordered to be produced under the Texas Public Information Act by the Texas Attorney General.

     

    Likewise, Texas HHS confidential information may not be disclosed without the express written permission of HHS unless such information is ordered to be produced under the Texas Public Information Act by the Texas Attorney General.