Resolution 2024-27 - Laserfiche WebLink

Home Browse Search

DocuSign Envelope ID: 601932A9-29F4-4C23-80F1-CEA4FACB795C v.4.10 COLORADO Financfal5ervices CkPaRiRCfil Of Hl,.. i. i'�,r Division of Cant,-" and Procurement part of the Work, as described in §§24-37.5-401, et. seq., C.R.S. Incidents include, without limitation, (i) successful attempts to gain unauthorized access to a State system or State Records regardless of where such information is located; (ii) unwanted disruption or denial of service; (iii) the unauthorized use of a State system for the processing or storage of data; or (iv) changes to State system hardware, firmware, or software characteristics without the State's knowledge, instruction, or consent. O. "Initial Term" means the time period defined in §2.13. P. "Party" means the State or Contractor, and "Parties" means both the State and Contractor. Q. "PCI" means payment card information including any data related to credit card holders' names, credit card numbers, or other credit card information as may be protected by state or federal law. R. "PHI" means any individually identifiable health information, transmitted or maintained in electronic or any form or medium, including but not limited to demographic information„ (i) that relates to the past, present or future physical or mental condition of an individual; the provision of health care to an individual; or the past, present or future payment for the provision of health care to an individual; and (ii) that identifies the individual or with respect to which there is a reasonable basis to believe the information can be used to identify the individual. PHI includes, but is not limited to, any information defined as Individually Identifiable Health Information by the federal Health Insurance Portability and Accountability Act. S.. "PII" means personally identifiable information including, without limitation, any information maintained by the State about an individual that can be used to distinguish or trace an individual's identity, such as name, social security number, date and place of birth, mother's maiden name, or biometric records; and any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information. PII includes, but is not limited to, all information defined as personally identifiable information in §24-72-501 and 24-73-101, C.R.S. "PII" shall also mean "personal identifying information" as set forth in § 24-74-102, et. Seq., C.R.S. T. "Services" means the services to be performed by Contractor as set forth in this Contract, and shall include any services to be rendered by Contractor in connection with the Goods. U. "State Confidential Information" means any and all State Records not subject to disclosure under CORA. State Confidential Information shall include, but is not limited to, PII, Page 8 of 41