PSA between Yakima Valley Memorial DD Info and Education Contract

Home Browse Search

Exhibit A g. When it is not feasible or practical to segregate DSHS Data from non-DSHS data, then both the DSHS Data and the non-DSHS data with which it is commingled must be protected as described in this exhibit. 5. Data Disposition. When the contracted work has been completed or when no longer needed, except as noted in Section 3. Protection of Data b. Network Server Disks above, Data shall be returned to DSHS or destroyed, Media on which Data may be stored and associated acceptable methods of destruction are as follows: Data stored on: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Will be destroyed by: Using a "wipe" utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or the disk Paper documents with sensitive or Confidential Recycling through a contracted firm provided the Information contract with the recycler assures that the confidentiality of Data will be orotected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) Optical discs (e.g. CDs or DVDs) On-site shredding, pulping, or incineration Incineration, shredding, or completely defacing the readable surface with a coarse abrasive I Ma netic tape j Degaussing, incinerating or crosscut shredding 6. Notification of Compromise or Potential Compromise. The compromise or potential compromise of DSHS shared Data must be reported to the DSHS Contact designated in the Contract within one (1) business day of discovery. If no DSHS Contact is designated in the Contract, then the notification must be reported to the DSHS Privacy Officer at dshsprivacyofficer@dshs.wa.gov. Contractor must also take actions to mitigate the risk of loss and comply with any notification or other requirements imposed by law or DSHS. 7. Data shared with Subcontractors. If DSHS Data provided under this Contract is to be shared with a subcontractor, the Contract with the subcontractor must include all of the data security provisions within this Contract and within any amendments, attachments, or exhibits within this Contract. If the Contractor cannot protect the Data as articulated within this Contract, then the contract with the sub - Contractor must be submitted to the DSHS Contact specified for this contract for review and approval. DSHS Central Contract Services Page 19 1769CS County Agreement 6-15-2017