Employee and third party contractor agreements include confidentiality clauses, reference security responsibilities, and identify penalties for non-compliance. Staff (employees, contractors, temporaries, interns, etc.) have minimum necessary access to confidential data based on their need-to-know and role. There is a termination process in place covering removal of access to buildings, systems, etc. within twenty-four hours of termination.