Contractor is responsible for all losses, liabilities, damages, penalties, fines, investigation expenses, notification expenses, credit-monitoring expenses, remediation expenses, and reasonable attorneys' fees incurred by Agency or affected individuals to the extent arising from Contractor's knowing or willful theft, misuse, unauthorized access, use, disclosure, or distribution of PHI or PII belonging to Agency clients, workforce members, or business partners. Contractor will not share credentials, download or retain protected health information (PHI) or PII on an unauthorized device or account, use an unsecured network, or transmit PHI or PII through personal email, text messaging, consumer file-sharing services, or another unapproved platform.