Laserfiche WebLink
Data Sharing Addendum - 5 <br />6.20.23 <br />the date the Authorized User’s access to Confidential Information <br />ends and (ii) provided to the City upon request. <br />e. Receiving Party must implement policies and procedures that limit the <br />Confidential Information disclosed to Authorized Users to the amount <br />reasonably necessary to achieve the purpose of the disclosure as <br />described in this Addendum. <br />f. Any disclosure of Confidential Information contrary to this Addendum is <br />unauthorized and is subject without limitation to penalties identified in law. <br />6. Confidential Information Disposal. <br />a. Receiving Party shall promptly dispose of Confidential Information and <br />Confidential Information Products upon the occurrence of any of the <br />following: <br />Written request from the Department; or <br />At the end of the term of the Agreement; or <br />When no longer needed for the Authorized Use, or <br />Six years have elapsed from the date the Confidential Information <br />was received from the City, unless otherwise directed by the <br />Department. <br />b. All Confidential Information and Confidential Information Product disposal <br />must be in accordance with the City Data Security Requirements <br />(EXHIBIT A: CITY DATA SECURITY REQUIREMENTS). Receiving Party <br />will provide written certification of disposition at the Department’s request <br />in a form reasonably acceptable to the Department. <br />c. Receiving Party may retain Confidential Information as necessary for <br />compliance or accounting purposes with the prior written consent of the <br />Department, which will not be unreasonably withheld. <br />d. Paper documents with Confidential Information may be recycled through a <br />contracted firm, provided the contract with the recycler specifies that the <br />confidentiality of information will be protected, and the information <br />destroyed through the recycling process. Paper documents containing <br />Category 4 Confidential Information must be destroyed on-site through <br />shredding, pulping, or incineration. <br />7. Confidential Data Breach <br />a. The compromise or potential compromise of Confidential Information that <br />may be a breach that requires notice to affected individuals under RCW <br />42.56.590, RCW 19.255.010, or any other applicable breach notification <br />law or rule must be reported to the Director within one (1) business day of <br />discovery.