i-ACT agreement - Laserfiche WebLink

Home Browse Search

Special Terms and Gonditions10. Data Segregation a. Data must be segregated or otherurise distinguishable from non-DCYF data. This is to ensure that when no longer needed by the Contractor, all Data can be identified fof'return or destruction. lt also aids in determining whether Data has or may have been compromised in the event of a security breach. As such, one or more of the following methods will be used for data segregation: (1). Data will be kept on media (e.9. hard disk, optical disc, tape, etc.) which will contain no non- DCYF Data; and/or; (2). Data will be stored in a logical container on electronic media, such as a partition or folder dedicated to Data; and/or; (3). Data will be stored in a database which will contain no non-DCYF data; and/or; (4). Data will be stored within a database and will be distinguishable from non-DCYF data by the value of a specific field or fields within database records; and (5).When stored as physieal paper documents, Data will be physically segregated from non-DCYF data in a drawer, folder, or other container. 11 b. When it is not feasible or practical to segregate Data from non-DCYF data, then both the Data and the non-DCYF data with which it is commingled must be protected as described in this exhibit. Confidentiality Protection. To safeguard confidentiality, and ensure that access to all Data is limited to authorized staff, the Contractor must: a. Ensure that the Contractor's Staff, Subcontractors, and the Subcontractors' Staff use Dala solely for the purposes of accomplishing the services set forth in this Contract; b. Ensure that no Data is released, disclosed, published, modified, transferred, sold, orothenr/se made known to unauthorized persons without the priorwritten consent of the individual named or as othenqrise authorized by law; c.The Contractor shall not use, publish, transfer, sell or othenrvise disclose any Confidential lnformation of a minor except as provided by laworwith the priorwritten consent of the minor's parent, legal representative orguardian. lf a child is a dependent of Washington State, then prior written consent must be obtained from DCYF; and Require that the Contractor's Staff and Subcontractors'Staff having access to Data sign a Statement of Confidentiality and Non-Disclosure Agreemenl (DCYF Form 03-3748), which can befoundatthiswebpage:M'Datashallnotbereleasedtothe Contractor's Staff person(s) or Subcontractors' Staff person(s) until the following conditions have been met: (1). DCYF approves the Contractor's Staff person(s) or Subcontractors' Staff person(s), to work on this Contract; and (2).lf requested by DCYF, Contractor must submit the signed original Statement of Confidentiality and Non-Disclosure Agreement, signed by the Staff person(s) or Subcontractors' Staff person(s). 12.Data Disposition. Contractor is responsible to ensure that all Data, including paper and electronic records, is retained pursuanl to Washington State retention standards. Prior to the destruction of any Data, the DCYF Contact specified for this contract, must be notified in writing and permission given in vwiting to destroy any such Data. When the contracted work has been compieted orwhen thebata is Depaftment of Children, Youth I Families 2O17CF County Program Agreement &24-20 d Page 15