Final Contract - Laserfiche WebLink

Home Browse Search

12. Data Disposition. Contractor is responsible to ensure that all Data, including paper and electronic records, is retained pursuant to Washington State retention standards. Prior to the destruction of any Data, the DCYF Contact specified for this contract, must be notified in writing and permission given in writing to destroy any such Data. When the contracted work has been completed or when the Data is no longer needed, Data shall be retained pursuant to the retention standards required by chapter 40.14 RCW. or returned to DCYF. c. Once written permission to destroy Data has been granted by DCYF to the Contractor, the following acceptable methods of destruction must be used: Data stored on: Will be destroyed by: Server or workstation hard disks, or Using a "wipe" utility which will overwrite the Data at least three (3) times using either random or single Removable media (e.g. floppies, USB flash character data, or drives, portable hard disks) excluding optical discs Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Recycling through a contracted firm, provided the Confidential Information contract with the recycler assures that the confidentiality of Data will be rotected. Paper documents containing Confidential Information requiring special handling (e.g. On-site shredding, pulping, or incineration protected health information Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Ma netic tae Degaussing, incinerating or crosscut shredding b. If any Data is required to be destroyed pursuant to this Section, within fifteen (15) calendar days after completion of such destruction the Contractor shall complete and deliver to DCYF a signed Certification of Data Disposition, which can be found at this webpage: https://www.dcvf wa qov/forms. 13. Data shared with Subcontractors. If Data provided under this Contract is to be shared with a subcontractor, the Contract with the subcontractor must include all of the data security provisions within this Contract and within any amendments, attachments, or exhibits within this Contract. If the Contractor cannot protect the Data as articulated within this Contract, then the contract with the subcontractor must be submitted to the DCYF Contact specified for this contract for review and approval. 14. Notification of Compromise or Potential Compromise. The compromise or potential compromise of DCYF shared Data must be reported to the DCYF Contact designated in the Contract within one (1) business day of discovery. If no DCYF Contact is designated in the Contract, then the notification must be reported to the DCYF Privacy Officer at: dc)dprivacyofficer dCyf.wa.gov. Contractor must also take actions to mitigate the risk of loss and comply with any notification or other requirements imposed by law or DCYF. 15. Breach of Data. In the event of a breach by the Contractor of this Exhibit and in addition to all other Department of Children, Youth & Families 2017CF County Program Agreement 6.24-20 Page 17