i-ACT program agreement - Laserfiche WebLink

Home Browse Search

d. Anti-Malware software shall be kept up to date. The product, its anti-virus engine, and any malware database the system uses, will be no more than one update behind current. 10. Data Segregation a. Data must be segregated or othenvise distinguishable from non-DCYF data. This is to ensure that when no longer needed by the Contractor, all Data can be identified for return or destruction. lt also aids in determining whether Data has or may have been compromised in the event of a security breach. As such, one or more of the following methods will be used for data segregation. (1). Data will be kept on media (e.9. hard disk, opticaldisc, tape, etc.)which willcontain no non- DCYF Data; and/or; (2). Data will be stored in a logical container on electronic media, such as a partition or folder dedicated to Data; and/or; (3). Data will be stored in a database which will contain no non-DCYF data; and/or; (4). Data will be stored within a database and will be distinguishable from non-DCYF data by the value of a specific field or fields within database records; and (5). When stored as physical paper documents, Data will be physically segregated from non-DCYF data in a drawer, folder, or other container. 11 b. When it is not feasible or practical to segregate Data from non-DCYF data, then both the Data and the non-DCYF data with which it is commingled must be protected as described in this exhibit. Confidentiality Protection. To safeguard confidentiality, and ensure that access to all Data is limited to authorized staff, the Contractor must: d.Ensure that the Contractor's Staff, Subcontractors, and the Subcontractors' Staff use Data solely for the purposes of accomplishing the services set forth in this contract; Ensure that no Data is released, disclosed, published, modified, transferred, sold, orotherwise made known to unauthorized persons without the prior written consent of the individual named or as othenvise authorized by law; The Contractor shall not use, publish, transfer, sell or otherwise disclose any Confidential lnformation of a minor except as provided by law or with the prior written consent of the minor,sparent, legal representative or guardian. lf a child is a dependent of Washington State, then prior written consent must be obtained from DCyF; and Require that the Contractor's Staff and Subcontractors' Staff having access to Data sign a Statement of Confidentiality and Non-Disclosure Agreement (DCYF Form 03-3748), which can befoundatthiswebpage:M.Datashallnotbereleasediothe Contractor's Staff person(s) or Subcontractors' StJfi person(s) until the following conditions havebeen met: (1)' DCYF approves the Contractor's Staff person(s) or Subcontractors' Staff person(s), to work onthis Contract; and (2).lf requested by DCYF, contractor must submit the signed original statement of confidentialityand Non-Disclosure Agreement, signed by the Staff perjon(s) or Subcontractors' Staff person(s). Department of Children, Youth & Families 2017CF County Program Agreement 6-24-20 b. c d Page 16