i-ACT agreement - Laserfiche WebLink

Home Browse Search

13. 14. Special Terms and Conditions no longer needed, Data shall be retained pursuant to the retention standards required by chapter 40.14 RCW, or returned to DCYF. j. Once vwitten permission to destroy Data has been granted by DCYF to the Contractor, the following acceptable methods of destruction must be used: b. lf any Data is required to be destroyed pursuant to this Section, within fifteen ( 1 5) calendar days after completion of such destruction the Contractor shall complete and deliver to DCYF a signid Certification of Data Disposition, which can be found at this webpage: h ltps : llwv**r. ci qy_f *va . gg v/f o r[r$,. Data shared with Subcontractors. lf Data provided underthis Contract is to be shared with a subcontractor, the Contract with the subcontractor must include all of the data security provisions within this Contract and within any amendments, attachments, or exhibits within this Contract. lf the Contractor cannot protect the Data as articulated within this Contract, then the contract with the subcontractor must be submitted to the DCYF Contact specified for this contract for review and approval. Notification of Compromise or Potential Compromise. The compromise or potential compromise of DCYF shared Data must be reported to the DCYF Contact designated in the Contractwithin one (,1) business day of discovery. lf no DCYF Contact is designated inthe Contract, then the notification mustbereportedtotheDcYFPrivacyofficerat:.Contractormustalsotake actions to mitigate the risk of loss and comply with any notification or otheriequirements imposed by law or DCYF. 15. Breach of Data. ln the event of a breach by the Contractor of this Exhibit and in addition to all other rights and remedies available to DCYF, DCYF may elect to do any of the following: a, Terminate the Contract; b' Require that the Contractor return all Data to DCYF that was previously provided to the Contractor Department of Children, Youth & Families 2O17CF County Program Agreement 624-20 page 16 Data stored on:Will be destroyed by: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a "wipe" utility which will ovenrrrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential I nformation Recycling through a contracted firm, provided the contract with the recycler assures that the confidentiali ty of Data will be protected Paper documents containing Confidential lnformation requiring special handling (e.g protected health information) On-site shredding, pulping, or incineration Opticaldiscs (e.9. CDs or DVDs)lncineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incine rating or crosscut shredding