TERMS AND CONDITIONS

APPROPRIATE USE AGREEMENT

• Protected Health Information (PHI) as defined under the HIPAA and the Health Information Technology for Economic and Clinical Health (HITECH) Act, is any information that is acquired and/or used by DHMSO related to any patient, or health-plan beneficiary, physician, or other health care provider.
• Confidential information may be disclosed only to persons or entities having a right to obtain access under applicable law, or whose contractual relationship with DHMSO provides for such access. Access of PHI is limited to the minimum necessary to accomplish the task or purpose for which access is authorized.
• Medical information identifiable by patient, in addition to being confidential information, is subject to state and federal laws and regulations regarding the maintenance and confidentiality. All individuals provisioned access to this information must abide by and be bound to such laws and regulations.
• I understand that DHMSO reserves the right to continuously monitor and audit user access, and that attempts to circumvent DHMSO security will constitute a violation of this agreement resulting in actions including, but not limited to, the revocation of access to the DHMSO Provider Portal or web-based forms and resources. DHMSO abides by all HIPAA requirements and failure to comply can result in civil and monetary penalties.
• I understand that I am responsible for all account activity that occurs under my user name and that I must log out of the DHMSO Provider Portal when I have finished accessing to prevent unauthorized access.
• I understand that I must create a secure password that adheres to DHMSO’s complexity requirements, and that my password may not be shared with any other individual, written down, posted or stored in any unencrypted form, or stored electronically without encryption. Password complexity requirements include:
• Minimum of 10 characters
• At least one each of the following: Uppercase letter, lowercase letter, number, and symbol
• No part of your name or user name may be used
• No easily guessed phrases or dictionary words
• No reuse of last 4 passwords
• I understand that I or a representative from my organization will notify DHMSO immediately when this access is no longer required by sending an email to ci/acohelptdesk@dignityhealth.org on or before the access termination date.