DOL Agent Agreement - Laserfiche WebLink

Home Browse Search

DocuSign Envelope ID: 94D165AB-F367-4157-8526-77F15FF93CD8 ATTACHMENT B - Data Security Requirements 1. Data Classification The classification of the data shared is considered: ❑ Category 1 — Public Information ❑ Category 2 — Sensitive Information ® Category 3 — Confidential Information ❑ Category 4 — Confidential Information Requiring Special Handling 2. Access Security Access to the Data will be restricted to authorized users by requiring a login using a unique user ID and complex password or other authentication mechanism which provides equal or greater security. Passwords must be changed on a periodic basis and the sharing of user ID and passwords is strictly prohibited. 3. Data Storage Agent agrees that any and all Data will be stored, processed, and maintained solely on designated computing equipment and that at no time will Data be processed on or transferred to any portable storage medium. 4. Data Transmission Agent agrees that any and all electronic transmissions or exchanges of system and application data with DOL and/or any other parties expressly designated by DOL shall take place via secure means. Data that is transferred by and/or resides on assigned DOL equipment is considered secure. 5. Distribution of Data Agent shall ensure no Data of any kind shall be transmitted, exchanged, or otherwise passed to other contractors/vendors or interested parties except on a case-by-case basis as specifically agreed to in writing by DOL. Agent further agrees not to release, outside their control, screen prints or other printed documents that are not designated for the customer. All hard copies not necessary for business use must be destroyed as referenced in the Data Disposal section. 6. Data Disposal Unless otherwise specified in the Agreement, Agent agrees that upon termination of this Agreement it shall erase, destroy, and render unrecoverable all DOL data and certify in writing that these actions have been completed within 30 days of the termination of this Agreement or within 7 days of the request of an agent of DOL, whichever shall come first. At a minimum, media sanitization is to be performed according to the standards enumerated by NIST SP 800-88 Guidelines for Media Sanitization. 7. Security Breach Notification Agent agrees to comply with all applicable laws that require the notification of individuals in the event of unauthorized release of DOL data or other event requiring notification. In the event of a breach of any of Agent's security obligations, or other event requiring notification under applicable law, Agent agrees to the following: a) Notify DOL by telephone and e-mail of such an event within 24 hours of discovery: DOL Help Desk, phone: (360) 902-0111; email: hlbhelp@dol.wa.gov b) Assume responsibility for costs and for cooperating with DOL on all matters necessary for informing all such individuals, as directed by DOL, and in accordance with applicable state and federal laws. c) Mitigate the risk of loss and comply with any notification or other requirements imposed by law or DOL. WA State Department of Licensing Page 22 of 26 DOL Reference # K6984 Version: January 2020 Attachment B — Data Security Requirements County Reference # V01901