Laserfiche WebLink
4. When it is not feasible or practical to segregate County data from non- <br /> County data, then both the County data and the non-County data with which <br /> it is commingled must be protected as described in this Agreement. <br /> D. Data Disposition. <br /> When the contracted work has been completed or when no longer needed, <br /> except as noted in 6.2 above, data shall be returned to the County or destroyed. <br /> Media on which data may be stored and associated acceptable methods of <br /> destruction are as follows: <br /> Data stored on: Will be destroyed by: <br /> Server or workstation hard disks, or 1. Using a "wipe" utility which will <br /> removable media (e.g., floppies, overwrite the data at least three <br /> USB flash drives, portable hard (3) times using either random or <br /> disks, Zip or similar disks) single character data; <br /> 2. Degaussing sufficiently to ensure <br /> that the data cannot be <br /> reconstructed; or <br /> 3. Physically destroying the disk. <br /> Paper documents with sensitive or Recycling through a contracted firm <br /> confidential data provided the contract with the <br /> recycler assures that the <br /> confidentiality of data will be <br /> protected. <br /> Paper documents containing On-site shredding, pulping or <br /> confidential information requiring incineration. <br /> special handling (e.g., PHI) <br /> Optical discs (e.g., CDs or DVDs) Incineration, shredding or completely <br /> defacing the readable surface with a <br /> course abrasive. <br /> Magnetic tape Degaussing, incinerating or crosscut <br /> shredding. <br /> E. Notification of Compromise or Potential Compromise. The compromise or <br /> potential compromise of County shared data must be reported to the County <br /> contact designated in the Contract within one (1) business day of discovery. <br /> E. Data shared with Subagencies. If County data provided under any Contract is to <br /> be shared with a subagency, the contract with the subagency must include all of <br /> the data security provisions within this Agreement and within any amendments, <br /> attachments or exhibits within any Contract. If the Agency cannot protect the data <br /> as articulated within this Agreement, then the contract with the subagency must be <br /> submitted to the County contact specified for the Contract for review and approval. <br /> Business Associate Agreement <br /> BAA-2018-101-198 <br /> City of Everett <br /> Page 11 of 13 <br />