Common use of Data Disposition Clause in Contracts

Data Disposition. When the contracted work has been completed or when no longer needed, data shall be returned to DSHS or destroyed in accordance with DSHS IT Security Policy. Media on which data may be stored and associated acceptable methods of destruction are as follows: Data stored on: Will be destroyed by: Server or workstation hard disks Using a “wipe” utility which will overwrite the data at least three (3) times using either random or single character data Degaussing sufficiently to ensure that the data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or confidential data Recycling through a contracted firm provided the contract with the recycler assures that the confidentiality of data will be protected. Paper documents containing confidential information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a course abrasive Magnetic tape Degaussing, incinerating or crosscut shredding Removable media (e.g. floppies, USB flash drives, portable hard disks, Zip or similar disks) Using a “wipe” utility which will overwrite the data at least three (3) times using either random or single character data Physically destroying the disk Degaussing magnetic media sufficiently to ensure that the data cannot be reconstructed, or

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, data except as noted above in Section 5.b, Data shall be returned to DSHS or destroyed in accordance destroyed, provided the Contractor may retain one copy of any such data as is necessary to comply with DSHS IT Security Policyapplicable work product documentation standards, subject to the continued obligations contained herein. Any daya retained for its purpose will be protected as required by this exhibit and as appropriate to the media on which that Data is stored. Media on which data Data may be stored and associated acceptable methods of destruction are as follows: Data stored on: Will be destroyed by: Server or workstation hard disks Using a “wipe” disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs utility which will overwrite the data Data at least three (3) times using either random or single character data data, or Degaussing sufficiently to ensure that the data Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or confidential data Confidential Information Recycling through a contracted firm firm, provided the contract with the recycler assures that the confidentiality of data Data will be protected. Paper documents containing confidential information Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a course coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding Removable media (e.g. floppies, USB flash drives, portable hard disks, Zip or similar disks) Using a “wipe” utility which will overwrite the data at least three (3) times using either random or single character data Physically destroying the disk Degaussing magnetic media sufficiently to ensure that the data cannot be reconstructed, orshredding

Data Disposition. When the contracted work has been completed or when no longer needed, whichever is earlier, data shall be returned to DSHS MHCADSD or destroyed in accordance with DSHS IT Security Policythe methods specified below. Media on which data may be stored and associated acceptable methods of destruction are as follows: Data stored on: Will be destroyed by: Server or workstation hard disks Using a “wipe” utility which will overwrite the data at least three (3) times using either random or single character data data; or Degaussing sufficiently to ensure that the data cannot be reconstructed, ; or Physically destroying the disk disk. Paper documents with sensitive or confidential data Recycling through a contracted firm provided the contract with the recycler assures that the confidentiality of data will be protected. Paper documents containing confidential information requiring special handling (e.g. e.g., protected health information) On-site shredding, pulping, or incineration incineration. Optical discs (e.g. e.g., CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a course abrasive abrasive. Magnetic tape Degaussing, incinerating or crosscut shredding shredding. Removable media (e.g. e.g., floppies, USB flash drives, portable hard disks, Zip or similar disks) Using a “wipe” utility which will overwrite the data at least three (3) times using either random or single character data data; or Physically destroying the disk disk; or Degaussing magnetic media sufficiently to ensure that the data cannot be reconstructed, or.

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b, or where United States Federal or Washington State data retention regulations or statutes apply, Data shall be returned to DSHS or destroyed. Data kept past the term of this Contract for compliance with United States Federal or Washington State law or regulation shall continue to be stored and then destroyed or returned in accordance with DSHS IT Security Policythe terms of this Contract. Media on which data Data may be stored and associated acceptable methods of destruction are as follows: Data stored on: Will be destroyed by: Server or workstation hard disks disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the data Data at least three (3) times using either random or single character data data, or Degaussing sufficiently to ensure that the data Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or confidential data Confidential Information Recycling through a contracted firm firm, provided the contract with the recycler assures that the confidentiality of data Data will be protected. Paper documents containing confidential information Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a course coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding Removable media (e.g. floppies, USB flash drives, portable hard disks, Zip or similar disks) Using a “wipe” utility which will overwrite the data at least three (3) times using either random or single character data Physically destroying the disk Degaussing magnetic media sufficiently to ensure that the data cannot be reconstructed, orshredding