Page 27 - Privacy_Program

Director of Information DP120A.8 If the organization chooses to apply and describe more limited uses or
Technology, Privacy and disclosure in its notice than required under 45 C.F.R. Part 164, then it will
Data Security ensure that it does not include in the notice a limitation affecting its right to
make a use or disclosure that is required by law or permitted to avert a serious
threat to health and safety.

Director of Information DP120A.9 The organization will promptly revise and redistribute its notice whenever there
Technology, Privacy and is a material change to the uses or disclosures, the individual’s rights, the
Data Security organization’ legal duties, or other privacy practices stated in the notice.

Director of Information DP120A.10 The organization will not implement a change to any term of the notice that
Technology, Privacy and would materially reduce the privacy protections of covered individuals prior to
Data Security the effective date of the notice in which such material change is reflected,
except when required by law.

Director of Information DP120A.11 Knowledge of a violation or potential violation of this policy must be reported
Technology, Privacy and directly to the Director of Information Technology, Privacy and Data Security.
Data Security

GES CONFIDENTIAL 24