8 of 138 cards in Security & Safeguards
Security & Safeguards · Company practice
Ensuring the security and integrity of the Services appears as a standalone use of the collected information, stated without further detail about the measures involved.
Ensure the security and integrity of our Services.
Security & Safeguards · Company commitment
eCW says it retains biometric data only until the first of the following occurs, at which point the data is scheduled for deletion: the purposes outlined in Section 9 have been satisfied, a date of deletion required by applicable law, or three years have passed since the reader’s last interaction with the Services. Two qualifications follow: eCW will not delete biometric data that is PHI unless the applicable Provider requests it, and apart from that case the collection, use, storage, disclosure and retention of biometric PHI is governed by Section 4 and any applicable Customer Documents rather than by Section 9.
We will retain such biometric data only until the occurrence of the first of the following, at which point the data will be scheduled for deletion: (a) the purposes outlined in this Section 9 have been satisfied, (b) any date of deletion required by applicable law, or (c) three (3) years have passed since your last interaction with our Services. Notwithstanding the foregoing, (1) eCW will not delete biometric data that is PHI unless requested by the applicable Provider, and (2) except as provided in subsection (1), the collection, use, storage, disclosure, and retention of biometric data that is PHI through the use of any of the Services shall be governed by Section 4 of this Privacy Policy and any applicable Customer Documents, not by this Section 9.
Security & Safeguards · Company commitment
eCW says it has reasonable and appropriate safeguards in place to help protect collected Personal Information from loss, misuse and unauthorized access, disclosure, alteration and destruction. It immediately qualifies this by saying that although it attempts to protect the information in its possession, no security system is perfect and it cannot promise that Personal Information will remain absolutely secure in all circumstances.
eCW has reasonable and appropriate safeguards in place to help protect the Personal Information eCW collects from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Although eCW attempts to protect the Personal Information in our possession, no security system is perfect, and eCW cannot promise that your Personal Information will remain absolutely secure in all circumstances.
Security & Safeguards · Company practice
eCW says it will retain Personal Information as needed to fulfil the purposes for which it was collected, and as necessary to comply with its business requirements and legal obligations, resolve disputes, protect its assets and enforce its agreements. It points California residents to a separate Privacy Notice for California Residents for further retention detail.
eCW will retain your Personal Information as needed to fulfill the purposes for which it was collected. eCW will retain and use your Personal Information as necessary to comply with eCW's business requirements, legal obligations, resolve disputes, protect our assets, and enforce our agreements. Additional information for California residents about our data retention practices is available in our Privacy Notice for California Residents.
Security & Safeguards · Context
Separately, readers with security questions or concerns, or who need to report a security incident, are directed to the eCW Chief Information Security Officer at the same Westborough address, marked for that officer, using the ciso.office contact given in the block.
If you have any questions or concerns related to Security or if you need to report a Security incident, please contact the eCW Chief Information Security Officer at:
eClinicalWorks, LLC 2 Technology Drive Westborough, MA 01581 Attn: Chief Information Security Officer ciso.office
Security & Safeguards · Company commitment
Where applicable law requires notice of known or suspected security breaches affecting the reader’s Personal Information, eCW says it will send breach notices to the contact information in the reader’s account unless the law requires a different method. For other events involving information about the reader, it may contact the reader by e-mail, telephone or mail.
Pursuant to applicable law, eCW may be required to send you notice of known or suspected security breaches that impact your Personal Information. In the event that eCW must provide a notice of a security breach to you, eCW will send security breach notices to the contact information contained in your account information unless eCW is required by law to notify you using another method. Otherwise, if eCW needs, or is required, to contact you concerning any event that involves information about you we may do so by e-mail, telephone, or mail.
Security & Safeguards · Company practice
The list includes helping maintain the safety, security and integrity of eCW’s website, products, services, databases and other technology assets and its business, and detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity and assisting in the prosecution of those responsible.
Help maintain the safety, security, and integrity of our website, products and services, databases and other technology assets, and business
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and assist in the prosecution of those responsible for that activity
Security & Safeguards · Company commitment
Where eCW retains CCPA/CPRA Personal Information only in de-identified form, it says it will not attempt to re-identify the data in response to a consumer rights request.
Additionally, if we retain your CCPA/CPRA Personal Information only in de-identified form, we will not attempt to re-identify your data in response to a Consumer Rights request.