Laserfiche WebLink
4 • <br /> d. Portable media includes, but is not limited to: optical media (e.g., CDs; <br /> DVDs), magnetic media (e.g., floppy disks, tape, Zip or Jaz disks) or <br /> flash media (e.g., CompactFlash, SD, MMC). <br /> 8. Data Stored for Backup Purposes <br /> a. Data may be stored on portable media as part of an Agency's existing, <br /> documented backup process for business continuity or disaster recovery <br /> purposes. Such storage is authorized until such time as that media <br /> would be reused during the course of normal backup operations. If <br /> backup media is retired while Confidential Information still exists upon it, <br /> such media will be destroyed at that time in accordance with the <br /> disposition requirements in Section X.D Data Disposition. <br /> b. Data may be stored on non-portable media (e.g., Storage Area Network <br /> drives, virtual media, etc.) as part of an Agency's existing documented <br /> backup process for business continuity or disaster recovery purposes. <br /> If so, such media will be protected as otherwise described in this <br /> Agreement. If this media is retired while Confidential Information still <br /> exists upon it, the data will be destroyed at that time in accordance with <br /> the disposition requirements in Section X.D Data Disposition. <br /> C. Data Segregation. <br /> 1. County data must be segregated or otherwise distinguishable from non- <br /> County data. This is to ensure that when no longer needed by the Agency, <br /> all County data can be identified for return or destruction. It also aids in <br /> determining whether County data has or may have been compromised in <br /> the event of a security breach. <br /> 2. Electronic County data will be stored: <br /> a. On media (e.g., hard disk, optical disc, tape, etc.) which will contain no <br /> non-County data; or <br /> b. In a logical container on electronic media, such as a partition or folder <br /> dedicated to County data; or <br /> c. In a database which will contain no non-County data; or <br /> d. Within a database and will be distinguishable from non-County data by <br /> the value of a specific field or fields within database records; <br /> 3. When stored as physical paper documents, County data will be physically <br /> segregated from non-County data in a drawer, folder or other container. <br /> Business Associate Agreement <br /> BAA-2018-101-198 <br /> City of Everett <br /> Page 10 of 13 <br /> 66 <br />