1. Login/Password: I will be given a temporary password to access the Service. I will select and enter a password known only to me the first time I use the Service, and will change my password at least every six months, or more frequently, if requested by Nemours. I will not share my assigned login or password or disclose the same to others. If I believe that another person has obtained my password, I will immediately change my password and inform my supervisor that my password may have been compromised. My supervisor will notify the Technical Liaison. I understand that Nemours may terminate my access to the Service at any time in Nemours’ sole discretion.

2. Privacy: I have no right of privacy when using the Service. Nemours may directly, or through third parties, monitor, record, inspect, test and/or audit my access to and use of the Service and my compliance with the terms of the Facility Agreement and this User Agreement.

3. Patient Privacy: I understand the Service provides access to Nemours Data, including Protected Health Information. I will take all reasonable and necessary precautions as required by federal and state law and regulations, including HIPAA, to maintain the security and privacy of the Service and any PHI that I access through the Service. Specifically:

(a) I will not access or use the Service for any purpose other than for the Permitted Uses under the Facility Agreement;

(b) I will only access the minimum Protected Health Information necessary to perform my assigned job function for Facility;

(c) I will take precautions to ensure that patients, visitors, and other unauthorized persons are not able to see my computer screen during my use of the Service;

(d) I will not disclose to any third party, transfer to any third party, sell to any third party, or otherwise permit or facilitate third party access to Nemours Data other than as permitted by the Facility Agreement; and,

(e) I will report to my supervisor any unauthorized access, use or disclosure of any portion of Nemours Data of which I become aware, who will report it to the Nemours Privacy Officer at privacy@nemours.org or (904) 697-4287.

4. Service Components: I further agree that:

(a) I will not alter the Service or Nemours Data in any way. If I believe the Service has been altered or suspect that there has been unauthorized alteration or destruction of any Nemours Data, I will stop using the Service immediately and report the problem to my supervisor, who will report it to the Technical Liaison;

(b) I will not copy or use Nemours Data, including the NemoursLink Manual and any NemoursLink documents or forms, for any purpose other than for the Permitted Uses under the Facility Agreement;

(c) I will not use or permit use of any Nemours Data in any manner that directly or indirectly competes with Nemours; and

(d) The Service allows Users to access Nemours’ electronic health record system (“NEHRS”), which is provided to Nemours under licenses granted by Epic Systems Corporation and others (the “System Providers”).  Nemours is obligated under its agreements with the System Providers to maintain the confidentiality of the System Providers’ trade secrets and other proprietary and confidential information, including the NEHRS software, user interfaces, user documentation, etc., and it is Nemours’ policy to maintain the confidentiality of such information and materials.  I shall comply with Nemours’ policy and agree to maintain the confidentiality of such information and materials.

5. Term of User Agreement: This User Agreement takes effect on the date on which it is signed below and will remain in effect until my access to the Service is terminated. I understand and agree my obligations under Sections 3(d), 4(b), 4(c) and 4(d) survive the termination or expiration of this User Agreement.

Security