Information Sharing Agreement

advertisement
ExecutivePulse Information Share
Agreement
1. ExecutivePulse 2014 CRM
The ExecutivePulse 2014 CRM (hereinafter referred to as the “Program”) is a web-based database
platform for government, economic, and workforce development professionals. Lane County
government, economic development, workforce organizations, and other regional partners will use
the Program to support on-going regional efforts to increase the prosperity of Lane County.
The Program is designed to assist participating Member Organizations to connect with wealth
generating companies who are already present in the community and determine what they need to
grow and be successful, to attract new businesses to the community, and to start and grow new
businesses that will become wealth generating companies.
The goal of using a program such as ExecutivePulse is to share information among organizations
about businesses to increase coordination between organizations, which in turn will reduce
duplication of efforts and/or visits to businesses and increase efficiency when assisting businesses.
In order for the Program to be successful it is essential that all agencies and organizations engaged
in its development and implementation are empowered and committed to share good quality and
relevant information in a responsible and secure way.
2. Aims and Objectives
This agreement sets out the principals for the secure and confidential sharing of business
information among partner organizations that operate in Lane County.
Organizations involved in providing services and support to local businesses have a responsibility to
ensure the business information is properly controlled and that businesses’ confidentiality rights are
respected. This balance between the need to share information to provide quality services and
protection of confidentiality can be difficult to achieve.
The overall aim of this agreement is to provide a framework for the partner organizations to
establish and regulate working practices in order to ensure that information is managed and shared
on a confidential and secure bases.
This agreement sets out:



The principles underpinning information sharing
The general purposes for information sharing
The responsibilities and commitments of partners to this agreement
It is not intended that this document be definitive or exhaustive, it is recognized that as policy
develops and implementation arrangements mature, this protocol will need to be reviewed and
amended in light of new information sharing requirements to ensure that it is ‘fit for purpose’.
3. Scope
This agreement sets out the principles that all partner organizations will follow to govern the sharing
of business information. In this protocol, the terms ‘data’ and ‘information’ are synonymous. The
protocol applies to all business information handled by the partner organizations.
This agreement also covers three levels of information access: (1) geographic access, (2) topic
access, and (3) user level access.
Under the terms of this agreement, information may be shared for any purpose that supports the
retention and expansion, recruitment, and/or support of businesses.
This is not intended to be an exhaustive list, as policy changes or delivery approaches mature other
purposes may be identified and these will be incorporated into the protocol during the monitoring
and review process.
4. Information Access
Member Organizations have access to the Program information in three ways: (1) geographic access,
(2) topic access, and (3) user level access. The three components of information access ensure
information is kept confidential and only seen by those working with the information. Each Member
Organization and user within each organization will receive access based on all three areas. The
figure below depicts how access for each user is defined.
Geography
User
Access
User Level
Topic
In addition to the determined user access, Member Organizations/individuals can receive access to
information on a “need to know” basis from other users.
Geographic Access
One level of information access in the Program is broken down by geography. Each Member
Organization is assigned geographic access based on the scope of their organization. For example,
regional organizations can access data on a regional level; while local governments can access data
for the local geographic area. Geographic access to database information is segmented as depicted
in the geographic hierarchy graphic below.
County
Eugene Incorporated
Eugene Unincorporated
Springfield Incorporated
Springfield Unincorporated
Topic Access
Another level of information access in the Program is by topic access. Each Member Organization is
assigned topic access based on the types of business in which they interact. For example, a Member
Organization that does business recruitment would access business recruitment information, while
other users would not. Some Member Organizations may access multiple topics of data based on
the work of their organization. The following are topic access areas:
A. Business Recruitment
B. Business Retention and Expansion
C. Entrepreneurial/Startup Support
User Level Access
Finally, ExecutivePulse provides five levels of user access to the Program. These levels are
segmented by system privileges, features, and functions. The following are the user roles for
ExecutivePulse:
A. Administrator: Has “read and write access” for everything in the database to include
companies, contacts, action items, journal entries, documents, e-mail messages, calendar
events, notes, etc. This is the only user designation that can manage other users of the
database. Can designate entries as strictly or conditionally confidential.
B. Outreach Professional: This user type has all rights and privileges of the Administrator
except they cannot manage other users in the database. They do have complete “read and
write access” for companies and contacts. Can designate entries as strictly or conditionally
confidential.
C. Outreach Volunteer: This user type has “read and write access” only for companies and
contacts that are assigned to them or that they enter directly. This user designation can’t
obtain companies, contact, etc. that fall outside these parameters. Typically, this
designation is conveyed to private sector stakeholders who will assist local economic
developers in a corporate outreach process. Limited reporting capabilities.
D. Viewer: This user type has all the rights and privileges of the Outreach Professional, but they
cannot add companies or contacts to the system. This user type can run both aggregate and
company specific reports.
E. Resource Provider: This is, essentially, “need to know only” access to the database. Can
receive and respond to action items and create journal entries and other minor entries.
Administrator
Outreach
Professional
Outreach
Volunteer*
Viewer
Resource
Provider
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
N
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
N
Y
Y
Y
Y
Y
Y
Y
Y
Y
N
Y
N
Y
N
N
N
N
N
Y
Y
N
N
Y
N
N
Y
N
Y
N
N
N
N
N
Y
Y
N
N
Y
N
N
Y
N
N
N
Manage Database Users
Manage Companies
Manage Contacts
Generate Action Items
Generate Journal Entries
Add Sticky Notes
Use Calendar Functions
Add Surveys
Add Metrics (Outcomes)
Attach Files
Use Grouping functions
Use E-­­mail functions
Use Privacy/Group functions
Generate Reports
Outlook Add-­­In functions
LEGEND:
Y=YES
N=NO
5. Role of Member Organizations
Member Organizations have “Outreach Professional” database access, as well as topic and
geographic breakdown access based on their organization.
All Member Organizations, throughout the term of its participation in the Program, agree:
A. To share information with each other about businesses as permitted by law and
confidentiality requirements;
B. To promote staff awareness of the protocol and to train staff in the principles of information
sharing;
C. To have proper procedures in place in relation to the way in which they will hold and use
business information;
D. To update and add Program database records;
E. To respect the confidentiality of Program information, to the extent permitted by law;
F. To accept the access levels to ExecutivePulse outlined above;
G. To not release information about the business or personal matters of any Program client
without permission of the particular client, to the extent permitted by law. For purposes of
this Agreement, a “Program Client” is defined as any business included in the Program
database;
H. To support, endorse and promote the accurate, timely, secure and confidential sharing of
information for the purposes stated in this protocol;
I. To report data in aggregate (minimum of three data points) as not to identify Program
clients; and
J. To require all employees and/or representatives to sign a “Member Organization
Confidentiality Statement” for the Program, a copy of which is attached hereto as Exhibit A.
6. Role of the South Willamette Economic Development Corporation (SWEDCO)
In addition to participating in the Program as a Member Organization, the South Willamette
Economic Development Corporation (SWEDCO) agrees to function as the contract manager for the
Program. In this capacity, SWEDCO agrees to be responsible for administering the contract with
ExecutivePulse. Inc. for the Program on behalf of the Member Organizations and acting as the
fiduciary agent on behalf of the Member Organizations in all matters relating to ExecutivePulse, Inc.
invoices for the services rendered for the Program. SWEDCO also agrees to function as the
implementing agency for the Program.
7. Role of Regional Resource Partners
As the Member Organizations interact with businesses, these businesses may have a need for
further assistance. The Member Organization should contact the appropriate “Regional Resource
Partner” to request additional assistance for their business clients. A “Regional Resource Partner” is
defined as any governmental department, economic development organization, workforce
organization, non-profit, or business that provides the highest-quality resources that has formally
agreed to participate in the Program, but not as a Member Organization. Regional Resource
Partners will be responsible for the following:
A. To respond (with at least a telephone call) to the referred Program business within 48 hours
from the time of contact by a Member Organization;
B. To appoint a contact person who will be responsible as serving as a liaison with the Member
Organizations;
C. To require all employees and/or representatives, who will be involved in the Program
and/or having access to the Program database, to execute the “Regional Resource Partner
Agreement and Confidentiality Statement”, a copy of which is attached hereto as Exhibit B.
A copy of all executed Regional Resource Partner Agreement and Confidentiality Statement
should be maintained by the Regional Resource Partner, a copy provided to SWEDCO and,
upon request, a copy provided to any Member Organization;
D. To update the Program database records with the actions taken on behalf of the client by
the Regional Resource Partner;
E. To respect the confidentiality of Program information, to the extent permitted by law; and
F. To notify appropriate Member Organization(s) of inquiry and provision of assistance.
8. Role of ExecutivePulse
ExecutivePulse has entered into a contract with the South Willamette Economic Development
Corporation (SWEDCO) to provide a customized web-based external service for Business Retention
and Expansion, Business Recruitment, and Entrepreneurial/Startup Support, and related services as
per the License Agreement dated XXXXXXX.
9. Addition of New Member Organization(s)
The Program may add new member organizations upon approval by a simple majority (50% plus
One) of existing member organizations. Upon approval of a simple majority, a new agreement will
be entered into by SWEDCO and the New Member Organization.
10. Term
This Agreement shall remain in effect until otherwise amended or terminated.
11. General Provisions
A. Termination: This Agreement shall be terminated in its entirety by mutual agreement
between all then current Member Organizations. In the event the Member Organization
seeks to terminate its participation in the Program, it shall provide written notice of its
intent to terminate its participation to SWEDCO. Such termination shall be effective at the
date specific in the written notice, and such terminating Member Organization shall
promptly complete those termination activities specific by SWEDCO. Further, such
terminating Member Organization shall be prohibited from using any information gained
from any other member organization as a part of its participation in the Program for its
economic benefit.
B. Amendment or Modification: This Agreement may be amended or modified by the parties,
provided that any such amendment or modification makes specific reference to this
Agreement, is executed in writing, signed by a duly authorized representative of each
Member Organization and, if required or applicable, approved by the legislative or
governing body of the Member Organization(s).
C. Capacity to Execute: The Member Organization hereby certifies that all actions necessary to
execute this agreement with SWEDCO and all other member organizations were taken, and
that the person executing this Agreement is authorized to do so and has the power to bind
the organization to the terms and conditions contained herein.
D. Liability: The Member Organization agrees to release the other parties from this Agreement
from any and all liability, which may be caused by or arise by the wrongful and/or negligent
conduct of the parties’ respective employees, contractors, and/or agents in the
performance of this Agreement or during participation in the Program. Notwithstanding
none of the parties waive an available immunities under the law.
E. Integration: This Agreement represents the entire and integrated Agreement between the
parties. This Agreement supersedes all prior and contemporaneous communication,
representations, understanding, agreements or contracts, whether oral or written, relating
to the subject matter of this Agreement.
F. Governing Law: This Agreement shall be governed and construed in accordance with the
laws of the State of Oregon, without giving effect to the principles thereof relating to
conflict of choice of laws.
G. Relationship of Parties: The parties hereby agree that at all times, the relationship between
them shall be that of an independent contractor. At no time shall the relationship between
the parties under this Agreement be construed, held out or considered as a joint venture,
principal-agent or employer-employee.
Agreement: we the undersigned do hereby agree to implement the terms and
conditions of this protocol.
Exhibit A:
Confidentiality Policy
Purpose
The purpose of this Confidentiality Policy is to establish standards of professional conduct for program
stakeholders of ExecutivePulse.
By reading and signing this Confidentiality Policy, program stakeholders agree to conduct themselves in
a manner which preserves the highest possible degree of customer confidence, trust and satisfaction.
This Confidentiality Policy primarily pertains to information housed in extranet databases which are
owned and managed by the South Willamette Economic Development Corporation (SWEDCO) for its
customers. These databases contain proprietary information about the wealth and job creating
businesses that comprise the economies of its customers.
This Confidentiality Policy also pertains to specific information communicated verbally or in written form
about businesses and/or their operations that can be construed as proprietary or confidential.
Definitions
A. Breach of confidentiality –Sharing or disseminating specific database information pertaining to a
customer without the formal, written consent of that customer.
Penalties
Penalties for violating this Confidentiality Policy may include, but are not be limited to, the immediate
suspension from ExecutivePulse and immediate termination of database rights without any prior
notification. Moreover, this Confidentiality Policy gives SWEDCO and its Board of Directors the right to
seek additional legal remedies.
Each program stakeholder should read and certify his or her understanding of and agreement to abide
by the requirements of this Confidentiality Policy. Original signed Confidentiality Policy agreements will
be maintained at the offices of SWEDCO. Copies of these agreements will be furnished to customers
upon request. SWEDCO will maintain the Confidentiality Policy agreements for all program stakeholders
for a period of three years after the program stakeholder is no longer associated with company.
Term of the Agreement
This agreement is in full force during the term of agreement between the program stakeholder and
SWEDCO.
Signature
As a program stakeholder of ExecutivePulse I have read, understand, and agree to abide by, the
Confidentiality Policy during the use of ExecutivePulse.
________________________________________________
Name
________________________________________________
Title
________________________________________________
Date
________________________________________________
Witness
________________________________________________
Exhibit B:
Regional Resource Partner Agreement and
Confidentiality Statement
**Coming Soon**
Download