i-ACT program agreement - Laserfiche WebLink

Home Browse Search

12.Data Disposition. Contractor is responsible to ensure that all Data, including paper and electronic records, is retained pursuant to Washington State retention standards. Prior to the destruction of any Data, the DCYF Contact specified for this contract, must be notified in writing and permission given in writing to destroy any such Data. When the contracted work has been completed or when the Data is no longer needed, Data shall be retained pursuant to the retention standards required by chapter 40.14 RCW, or returned to DCYF. c. Once written permission to destroy Data has been granted by DCYF to the Contractor, the following acceptable methods of destruction must be used: Data stored on:Will be destroyed by: Server or workstation hard disks, or Removable media (e.9. floppies, USB flash drives, portable hard disks) excluding optical discs Using a "wipe" utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential I nformation Recycling through a contracted firm, provided the contract with the recycler assures that the confidential ity of Data will be protected Paper documents containing Confidential lnformation requiring special handling (e.g protected health information) On-site shredding, pulping, or incineration Opticaldiscs (e.9. CDs or DVDs)ncineration, shredding, or completely defacing the readable surface with a coarse abrasive Ma netic ta Degaussing, incineratin g or crosscut shreddinq b. lf any Data is required to be destroyed pursuantto this Section, within fifteen (15) calendardays after completion of such destruction the Contractor shall complete and deliver to DCyF a signedcertification of Data Disposition, which can be found at this webpage: h ttps ://www. d cyf .wa. g ov/foJms 13. Data shared with Subcontractors. lf Data provided underthis Contract is to be shared with asubcontractor, the Contract with the subcontractor must include all of the data security provisions withinthis contract and within any amendments, attachments, or exhibits within this contract. trtrecontractor cannot protect the Data as articulated within this contract, then the contract with thesubcontractor must be submitted to the DCYF Contact specified for this contract for review andapproval. 14' Notification of compromise or Potential Compromise. The compromise or potential compromise ofDCYF shared Data must be reported to the DCYF Contact designated in the Contractwithin one (1)business day of discovery. lf no DCYF Contact is designateO in tfre Contract, then the notification mustbe reported to the DCYF Privacy officer at: sleyfprjveEv-Ipjtics@d-qv-r-.rya'q.oy, contractor must also takeactions to mitigate the risk of loss and compiy ffih Snv"notiriCjiioii"Jr oirr?:r?equirements imposed bylaw or DCYF. 15' Breach of Data' ln the event of a breach by the contractor of this Exhibit and in addition to all otherDepartment of Children, youth & Famities 2017CF County Program Agreement 6-24-20 page 17