Laserfiche WebLink
4 | P a g e <br />Category 4 – Confidential Information Requiring Special Handling <br />Confidential information requiring special handling is information that is specifically <br />protected from disclosure by law and for which: <br />a. Especially strict handling requirements are dictated, such as by statutes, <br />regulations, or agreements <br />b. Serious consequences could arise from unauthorized disclosure, such as <br />threats to health and safety, or legal sanctions <br />7. DESCRIPTION OF DATA TO BE SHARED <br />The data to be shared includes information and data related to operations and compliance with <br />contractual, state, and federal programs, security of computer systems, and performance data. <br />8. DATA ACCESS <br />SNO911 may provide the Agency direct, read-only access into select internal systems. <br />SNO911 will provide system access only in support of demonstrated need for the providing, <br />monitoring, and assessment of Agency’s public safety services. Agency agrees to notify <br />SNO911 when access is no longer needed. <br />9. DATA TRANSMISSION <br />Transmission of data between SNO911 and the Agency will use a secure method that is <br />commensurate to the sensitivity of the data being transmitted. <br />10.DATA STORAGE AND HANDLING REQUIREMENTS <br />All confidential data provided by SNO911 will be stored with access limited to the least number <br />of Agency staff needed to complete the purpose of this DSA. <br />11.CONSTRAINTS ON USE OF DATA <br />Agency will strictly limit use of information obtained under this DSA to the purpose of carrying <br />out its public safety obligations. Any disclosure of Data contrary to this DSA is unauthorized <br />and is subject to penalties identified in law. <br />12.SECURITY OF DATA <br />Agency will protect and maintain all Confidential Information gained by reason of this DSA <br />against unauthorized use, access, disclosure, or loss. Agency will comply with industry <br />standard practices and policies for data security and access controls to ensure the <br />confidentiality, and integrity of all data shared. This includes restricting access to the <br />Confidential Information by: <br />a. Allowing access only to staff that have an authorized business requirement to view <br />the Confidential Information. Such staff must be properly trained in security <br />awareness. <br />b. Physically securing any computers, documents, or other media containing the <br />Confidential Information.