Data Disposition Clause Samples

Data Disposition. When the contracted work has been completed or when no longer needed, except as noted in 2.b above, Data shall be returned to the EXCHANGE or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Data stored on: Will be destroyed by: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks, Zip or similar disks) Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character Data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or confidential Data Recycling through a contracted firm provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing confidential information requiring special handling (e.g. protected health information) On-site shredding by a method that renders the Data unreadable, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or cutting/breaking into small pieces. Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b, Data shall be returned to DSHS or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. If data destruction is required by the Agreement, the data must be destroyed using one or more of the following methods: Hard disks Using a “wipe” utility which will overwrite the data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the data cannot be reconstructed, or Physically destroying the disk , or Delete the data and physically and logically secure data storage systems that continue to be used for the storage of Confidential or Restricted information to prevent any future access to stored information. One or more of the preceding methods is performed before transfer or surplus of the systems or media containing the data. Paper documents with Confidential or Restricted information On-site shredding, pulping, or incineration, or Recycling through a contracted firm provided the Contract with the recycler is certified for the secure destruction of confidential information. Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a course abrasive. Magnetic tape Degaussing, incinerating or crosscut shredding. Removable media (e.g. floppies, USB flash drives, portable hard disks, Zip or similar disks) Using a “wipe” utility which will overwrite the data at least three (3) times using either random or single character data. Physically destroying the disk. Degaussing magnetic media sufficiently to ensure that the data cannot be reconstructed.

Data Disposition. Upon Disclosing Party’s written request, Receiving Party shall promptly return all documents and other media containing Confidential Information. Any information that cannot feasibly be returned shall be purged, deleted or destroyed. The Receiving Party shall have an obligation to safeguard all other information.

Data Disposition. For the purposes of this section “fiscal year” is from July 1 to June 30. Upon request by HCA, at the end of the Contract term, when no longer needed, or 6 years after the end of the fiscal year in which the Data is received, Confidential Information/Data must be returned to HCA or disposed of as set out in Attachment 1, Confidential Information Security Requirements, except as required to be maintained for compliance or accounting purposes.

Data Disposition. When the contracted work has been completed or when no longer needed, except as noted in Section 3. Protection of Data b. Network Server Disks above, Data shall be returned to Great Rivers or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Data stored on: Will be destroyed by:

Data Disposition. Unless otherwise directed in writing by the DOH Business Contact, at the end of this Agreement, or at the discretion and direction of DOH, the Information Recipient shall: Immediately destroy all copies of any data provided under this Agreement after it has been used for the purposes specified in the Agreement . Acceptable methods of destruction are described in Appendix B. Upon completion, the Information Recipient shall submit the attached Certification of Data Disposition (Appendix C) to the DOH Business Contact. Immediately return all copies of any data provided under this Agreement to the DOH Business Contact after the data has been used for the purposes specified in the Agreement, along with the attached Certification of Data Disposition (Appendix C)

Data Disposition. Upon the disclosing Party’s written request, the receiving Party shall promptly return all documents and other media containing Confidential Information. Any information that cannot feasibly be returned shall be purged, deleted or destroyed and the receiving Party shall deliver to the disclosing Party written certification thereof; provided, however, that the receiving Party may retain a single copy of the Confidential Information solely for the purpose of complying with applicable law or regulation or the order of any court, arbitration panel, regulator or similar governmental authority having jurisdiction over the receiving Party. The receiving Party shall have an ongoing obligation to safeguard all information of the disclosing Party that is not returned, purged, deleted or destroyed.

Data Disposition. 5.1 Consistent with Chapter 40.14 RCW, Contractor shall erase, destroy, and render unrecoverable all HCA Confidential Data and certify in writing that these actions have been completed within thirty (30) days of the disposition requirement or termination of this Contract, whichever is earlier. At a minimum, media sanitization is to be performed according to the standards enumerated by NIST SP 800-88r1 Guidelines for Media Sanitization. 5.2 For HCA’s Confidential Information stored on network disks, deleting unneeded Data is sufficient as long as the disks remain in a Secured Area and otherwise meet the requirements listed in Section 3, above. Destruction of the Data as outlined in this section of this Attachment may be deferred until the disks are retired, replaced, or otherwise taken out of the Secured Area.