NATIONAL INSURANCE CRIME BUREAU - Laserfiche WebLink

13 SIU management. It is the responsibility of the Participating Organization using the service to protect the security of the data downloaded from ISO ClaimSearch. The information obtained from IQ download cannot be downloaded to personal devices not approved and registered for work purposes. Mobile hardware such as laptops must be equipped with local encryption soft- ware and remote hard-drive “wipe” capability. The use of IQ download will be limited to 500 records within a 24-hour time frame, with the ability for the designated home office contact to review the activity and allow additional queries. IQ download reports will expire within 30 days if accessed and 60 days if not accessed by the Authorized User. Under no circumstances can IQ download reports be warehoused locally by an Authorized User for any other purpose except in support of the investigation of a claim. • Digital media contained within ISO ClaimSearch consists of ISO ClaimSearch Information. The following conditions must be met by the Participating Organizations with digital media access: – The Participating Organization must be contributing digital media to ISO ClaimSearch to view digital media contributed by other Participating Organizations. – Authorized Users shall not upload digital media that display personally identifiable information (PII) or Personal Health Information (PHI). – Authorized Users shall not upload digital media that may be considered vulgar or offensive or in violation of any law or regulation. – Authorized Users shall report content uploaded to ISO ClaimSearch in violation of any of the above to ClaimSearchCompliance@iso.com. 8 . Access Outside the United States ISO recognizes the need of our Participating Organizations to globalize business support functions, including granting certain ISO ClaimSearch access functions to personnel at offshore locations. All Participating Organizations are expected to manage their Authorized Users diligently and comply with their respective requirements under the executed ISO ClaimSearch product supplement and all requirements contained herein. Access to ISO ClaimSearch by personnel at offshore locations requires advanced consent from ISO. All access to ISO ClaimSearch outside the United States should be through a U.S.- based network and related IP address. 9 . Access to the Social Security Administration (SSA) Limited Access Death Master File (LADMF) Following the Bipartisan Budget Act of 2013, access to the Limited Access DMF for individuals who have died in the last three years is restricted to users certified by the National Technical Information Service (NTIS). ISO ClaimSearch has been certified to use a copy of the Limited Access DMF for the permissible purpose of insurance fraud detection and prevention. Pursuant to our license agreement, ISO ClaimSearch Participating Organizations must also comply with NTIS requirements. ISO ClaimSearch Participating Organizations must have controls in place to safeguard the Limited Access DMF in accordance with the requirements of the SSA and/or NTIS. NTIS requires that certified persons who obtain a copy of the LADMF (i.e., ISO/Verisk Analytics) also communicate that the penalty provisions of 15 CFR section 1110.200, apply to unauthorized disclosure of the LADMF. Under 15 CFR section 1110.200, each unauthorized disclosure or use can be subject to a penalty of $1,000 per occurrence up to a maximum of $250,000 in penalties per calendar year. Docusign Envelope ID: 329281D2-142C-8B83-837A-7CD218C257C4