Robin H Read FINAL CONTRACT - Laserfiche WebLink

Home Browse Search

Special Terms and Conditions (2) When being transported outs de of a Secure Area, Portable Devices and Portable Media with DSHS Confidential Informaticn must be under the physical control of Contractor staff with authorization to access the Data, even if the Data is encypted. h, Data stored for backup purposes. (1) DSHS Confidential Information may be stored on Portable Media as part of a Contractor's existing, documented backup process fcr business continuity or disaster recovery purposes. Such storage is authorized until such time as that media would be reused during the course of normal backup operations. It backup media is retired while DSHS Confidential Information still exists upon it, such media wi I be destroyed at that time in accordance with the disposition requirements below in Section 8 Data D sposition. (2) Data may be stored on non-Fortable media (e.g. Storage Area Network drives, virtual media, etc.) as part of a Contractor's existing, documented backup process for business continuity or disaster recov. iy purposes. If so, such media will be protected as otherwise described in this exhibit. If this media is retired while DSHS Confidential Information still exists upon it, the data will be destroyed at that time in accordance with the disposition requirements below in Section 8 Data Disposition 1. Cloud storage. DSHS Confidertial Information requires protections equal to or greater than those specified elsewhere within this exhibit. Cloud storage of Data is p-oblematic as neither DSHS nor the Contractor has control of the environme-it in which the Data is stored. For this reason: (1) DSHS Data will not be storec in any consumer grade Cloud solution, unless all of the following conditions are met: (a) Contractor has written procedures ir i cic: governing use of the Cloud storage and Contractor attest to the contact listed m [he contract and keep a copy of that attestation for your records in writing that all such procedures will t:e uniformly followed. (b)The Data will be Encrypted while within the Contractor network. (c) The Data will remain Encrypted during transmiss on to the Cloud. (d) The Data will remain Encrypted at all times while residing within the Cloud storage solution. (e) The Contractor will possess a decryption key for the Data. and the decryption key will be possessed only by the Contractor. M The Data will not be downloaded to -ion-authorized systems, meaning systems that are not on the contractor network (g) The Data will not be decrypted until downloaded onto a computer within the control of an Authorized User and within either the DSHS or Contractor's network. (2) Data will not be stored on an Enterprise Cloud storage s.oluticn unless either: (a) The Cloud storage provicer is treated as any other Sub -Contractor, and agrees in writing to all of the requirements within this exhibit; or, (b) The Cloud storage solution used is HIPAA comp iant. DSHS Central Contract Services Page 24 1769CS County Agreement 05-16-2023