Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I use third-party cloud storage services that collect personal information in New Hampshire? What are the requirements?

Based on the documents provided, there are no specific regulations or requirements regarding the use of third-party cloud storage services that collect personal information in New Hampshire. However, if you are a licensee using a third-party service provider, you must enter into a binding, enforceable contractual agreement with the third-party service provider to maintain the confidentiality of the information and receive reasonable assurances from the third-party service provider that it has appropriate procedures in place to prevent the unauthorized release of confidential information to others [1.8]. Additionally, all personal information in the possession of the service provider shall be used only for the purposes directly connected with the provision of IL services [1.3].

It is important to note that the collection of PII and other personal information and data by NHVR personnel concerning individuals shall be authorized by the individual through completion of the “Application for Vocational Rehabilitation Services and Authorization to Release Information” form [1.5]. In situations not covered by the provisions of Ed 1003.05(a), upon receiving the informed written consent of the applicant or eligible individual the NHVR shall release PII and other personal information and data in accordance with 34 CFR 361.38(e)(1) [1.1].

Therefore, it is recommended that you carefully review the terms and conditions of any third-party cloud storage service you plan to use and ensure that they have appropriate procedures in place to protect the confidentiality of personal information.

Source(s):
Jurisdiction

New Hampshire