Laserfiche WebLink
DOCUSign Envelope ID: 2A334111-667-4a37.94A9.4i26DA2ACCD4 <br />Special Terms and Conditions <br />12, Data Disposition. Contractor is responsible to ensure that all Data, including paper and electronic <br />records, is retained pursuant to Washington State retention standards. Prior to the destruction of any <br />Data, the DCYF Contact specified for this contract, must be notified in writing and permission given in <br />writing to destroy any such Data. When the contracted work has been completed or when the Data is <br />no longer needed, Data shall be retained pursuant to the retention standards required by chapter40.14 <br />RCW, or returned to DCYF. <br />a. Once written permission to destroy Data has been granted by DCYF to the Contractor, the following <br />acceptable methods of destruction must be used: <br />Data stored on: <br />Will be destroyed by: <br />Server or workstation hard disks, or <br />Using a "wipe" utility which will overwrite the Data at <br />Removable media (e.g. floppies, USB flash <br />least three (3) times using either random or single <br />character data, or <br />drives, portable hard disks) excluding optical <br />discs <br />Degaussing sufficiently to ensure that the Data <br />cannot be reconstructed, or <br />Physically estroyino the disk <br />Paper documents with sensitive or <br />Confidential Information <br />Recycling through a contracted firm, provided the <br />contract with the recycler assures that the <br />confidentiality of Data will be protected. <br />Paper documents containing Confidential <br />Information requiring special handling (e.g. <br />On-site shredding, pulping, or incineration <br />protected health information <br />Optical discs (e.g. CDs or DVDs) <br />Incineration, shredding, or completely defacing the <br />readable surface with a coarse abrasive <br />Magnetic tape <br />De aussin , incinerating or crosscut shredding <br />b. If any Data is required to be destroyed pursuant to this Section, within fifteen (15) calendar days <br />after completion of such destruction the Contractor shall complete and deliver to DCYF a signed <br />Certification of Data Disposition, which can be found at this webpage: <br />ti /L www. dcyf,wa.govtforms. <br />13. Data shared with Subcontractors. If Data provided under this Contract is to be shared with a <br />subcontractor, the Contract with the subcontractor must include all of the data security provisions within <br />this Contract and within any amendments, attachments, or exhibits within this Contract. If the <br />Contractor cannot protect the Data as articulated within this Contract, then the contract with the <br />subcontractor must be submitted to the DCYF Contact specified for this contract for review and <br />approval. <br />14. Notification of Compromise or Potential Compromise. The compromise or potential compromise of <br />DCYF shared Data must be reported to the DCYF Contact designated in the Contract within one (1) <br />business day of discovery. If no DCYF Contact is designated in the Contract, then the notification must <br />be reported to the DCYF Privacy Officer at: do rlvacvofficerCadcVf.wal.gov. Contractor must also take <br />actions to mitigate the risk of loss and comply with any notification or other requirements imposed by <br />law or DCYF. <br />15. Breach of Data. In the event of a breach by the Contractor of this Exhibit and in addition to all other <br />Department of Children, Youth 8 Familles <br />2017CF County Program Agreement (8-1-2019) Page 15 <br />