Data Disposition When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b, Data shall be returned to DSHS or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Data stored on: Will be destroyed by: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding
Nature of Return or Disposition Disposition shall be by destruction or deletion of data. Return shall be by a transfer of data. The data shall be transferred to the following site as follows:
Timing of Return or Disposition Data shall be returned or disposed of by the following date: As soon as commercially practicable By the following agreed upon date:
Permitted Transfers Within Escrow 5.1 Transfer to Directors and Senior Officers
Extent of Return or Disposition Return or Disposition is partial. The categories of data to be disposed of are set forth below or are found in an attachment to this Directive: Return or Disposition is Complete. Disposition extends to all categories of data.
Timing of Disposition Data shall be disposed of by the following date: As soon as commercially practicable By (Insert Date]
