Data Sharing Agreement 2019 - Laserfiche WebLink

Home Browse Search

f) The devices/ media must be physically protected by: • Storing them in a secured and locked environment when not in use; • Using check-in/check-out procedures when they are shared; and • Taking frequent inventories. 4. When passwords and/or encryption keys are stored on mobile devices or portable storage media they must be encrypted and protected as described in this section. G. Backup Media The data may be backed up as part of Information Recipient's normal backup process provided that the process includes secure storage and transport, and the data is encrypted as described under F. Data storage on mobile devices or portable storage media. H. Paper documents Paper records that contain data classified as Confidential or Restricted must be protected by storing the records in a secure area which is only accessible to authorized personnel. When not in use, such records is stored in a locked container, such as a file cabinet, locking drawer, or safe, to which only authorized persons have access. I. Data Segregation 1. The data must be segregated or otherwise distinguishable from all other data. This is to ensure that when no longer needed by the Information Recipient, all of the data can be identified for return or destruction. It also aids in determining whether the data has or may have been compromised in the event of a security breach. 2. When it is not feasible or practical to segregate the data from other data, then all commingled data is protected as described in this Exhibit. J. Data Disposition If data destruction is required by the Agreement, the data must be destroyed using one or more of the following methods: Data stored on: Is destroyed by: Hard disks Using a "wipe" utility which will overwrite the data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the data cannot be reconstructed, or Physically destroying the disk, or Page 23 of 26 09/2017