Data Use & Confidentiality Agreement

1. Confidentiality of Platform Data

All information accessible through the Health Response Hub - including resource requests, facility operational status, partner activities, situational reports, and any organizational data - is strictly confidential. By accessing this platform, you agree to:

• Treat all data encountered on this platform as confidential operational information
• Not share, distribute, publish, screenshot, or transmit any platform data to any person or organization outside of your immediate response team without explicit written authorization from Health Response Alliance
• Not share platform data internally beyond personnel with a direct operational need
• Store any downloaded or exported data securely and delete it when no longer operationally required

2. Permitted Use - Operational Purposes Only

Access to this platform is granted solely for operational disaster response and resource matching purposes. Permitted uses include:

• Identifying and fulfilling facility resource requests during declared emergencies or ongoing operations
• Logging organizational response activities for situational awareness
• Monitoring the operational response picture as a coordinating body
• After-action review and grant compliance reporting with HRA's written approval

3. Prohibited Uses

The following uses are expressly prohibited without the explicit written permission of Health Response Alliance and, where applicable, the organizations or facilities whose data appears on the platform:

• Marketing or communications: Data from this platform may not be used to produce press releases, social media content, newsletters, media briefings, or any public-facing communications
• Fundraising: Facility needs, operational data, or response activities may not be used in donor appeals, grant applications, or fundraising materials without explicit written consent from all parties involved
• Research or publication without a separate data use agreement with HRA
• Commercial purposes of any kind
• Competitive intelligence or benchmarking against other organizations
• Screenshots, data exports, or bulk data extraction for any purpose other than direct operational response activities (e.g., situational awareness by response personnel, internal after-action documentation)
• Automated scraping or programmatic data collection of platform content

4. No PHI or PII - Platform is NOT HIPAA-Compliant

This platform has not been designed, audited, or certified for compliance with the Health Insurance Portability and Accountability Act (HIPAA) or any other health data privacy regulation. You must not enter:

• Patient names, dates of birth, addresses, or any identifying information
• Medical record numbers, diagnoses, treatment information, or clinical data of any kind
• Insurance or billing information
• Any data that would identify an individual patient or their health condition
• Staff personal information beyond what is necessary for operational contact (name, work email, work phone)

Resource requests should describe aggregate operational needs only (e.g., "insulin for approximately 200 patients") - never individual patient-level information.

5. Data Ownership and Access

All data submitted to this platform remains the property of the submitting organization. Health Response Alliance acts as a steward of this data for the sole purpose of facilitating emergency response operations. HRA will not sell, license, or share organizational data with third parties outside of the immediate response operation.

6. Accountability and Enforcement

Violation of this agreement may result in immediate revocation of platform access and may be reported to your organization's leadership. Serious breaches - particularly unauthorized disclosure of operational data during an active emergency - may be referred to appropriate authorities. HRA reserves the right to audit platform activity logs at any time.

7. Contact

For questions, assistance, data entry support, or requests for authorization, contact Health Response Alliance at [email protected].