Laserfiche WebLink
7 <br />6. <br />DSHS Central Contract Services <br />1 769CS Cou nty Ag reement (1 2-26-2025) <br />Special Terms and Conditions <br />(3) lf the Data includes protected health information covered by the Health lnsurance Portability and <br />Accountability Act (HIPAA), the Cloud provider must sign a Business Associate Agreement prior <br />to Data being stored in their Cloud solution. <br />System Protection. To prevent compromise of systems which contain DSHS Data or through which <br />that Data passes: <br />a. Systems containing DSHS Data must have all security patches or hotfixes applied within 3 months <br />of being made available. <br />b. The Contractor will have a method of ensuring that the requisite patches and hotfixes have been <br />applied within the required timeframes, <br />c. Systems containing DSHS Data shall have an Anti-Malware application, if available, installed. <br />d. Anti-Malware software shall be kept up to date. The product, its anti-virus engine, and any malware <br />database the system uses, will be no more than one update behind current. <br />Data Segregation. <br />a. DSHS category 4 data must be segregated or otherwise distinguishable from non-DSHS data. This <br />is to ensurethat when no longer needed by the Contractor, all DSHS Data cari be identified for <br />return or destruction. lt also aids in determining whether DSHS Data has or may have been <br />compromised in the event of a security breach. As such, one or more of the following methods will <br />be used for data segregation <br />(1) DSHS Data will be kept on media (e.9. hard disk, optical disc, tape, etc.) which will contain no <br />non-DSHS Data. <br />(2) DSHS Data will be stored in a logical container on electronic media, such as a partition or folder <br />dedicated to DSHS Data <br />(3) DSHS Data will be stored in a database which will contain no non-DSHS data. And/or, <br />(4) DSHS Data will be stored within a database and will be distinguishable from non-DSHS data by <br />the value of a specific field or fields within database records. <br />(5) When stored as physical paper documents, DSHS Data will be physically segregated from non- <br />DSHS data in a drawer, folder, or other container. <br />b. When it is not feasible or practical to segregate DSHS Data from non-DSHS data, then both the <br />DSHS Data and the non-DSHS data with which it is commingled must be protected as described in <br />this exhibit. <br />Data Disposition. When the contracted work has been completed or when the Data is no longer <br />needed, except as noted above in Section 5.b, Data shall be returned to DSHS or destroyed. Media on <br />which Data may be stored and associated acceptable methods of destruction are as follows: <br />8 <br />Data stored on:Will be destroyed by: <br />Server or workstation hard disks, or Using a "wipe" utility which will overwrite the Data at <br />least three (3) times using either random or single <br />character d or <br />Page25