Common use of Data Disposition Clause in Contracts

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b, Data shall be returned to DSHS or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the DSHS Data is no longer needed, except as noted above in Section 5.b, DSHS Data shall be returned to DSHS or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, incineration, or incineration contractor Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.bB.2 above, Data data shall be returned to DSHS the County or destroyed. Media on which Data data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable removable media (e.g. e.g., floppies, USB flash drives, portable hard disks, Zip or similar disks) excluding optical discs 1. Using a “wipe” utility which will overwrite the Data data at least three (3) times using either random or single character data, or ; 2. Degaussing sufficiently to ensure that the Data data cannot be reconstructed, ; or 3. Physically destroying the disk disk. Paper documents with sensitive or Confidential Information confidential data Recycling through a contracted firm, firm provided the contract with the recycler assures that the confidentiality of Data data will be protected. Paper documents containing Confidential Information confidential information requiring special handling (e.g. protected health informatione.g., PHI) On-site shredding, pulping, pulping or incineration incineration. Optical discs (e.g. e.g., CDs or DVDs) Incineration, shredding, shredding or completely defacing the readable surface with a coarse abrasive course abrasive. Magnetic tape Degaussing, incinerating or crosscut shredding.

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b, . Data shall be returned to DSHS the County or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, firm provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b3. Protection of Data b. Network Server Disks above, Data shall be returned to DSHS or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, firm provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b, Data data shall be returned to DSHS HCA or destroyed. When the Contractor destroys data, the Contractor will keep no copies. Media on which Data data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs , Zip or similar disks). Using a “wipe” utility which will overwrite the Data data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data data cannot be reconstructed, or Physically destroying the disk disk. Paper documents with sensitive or Confidential Information confidential data. Recycling through a contracted firm, firm provided the contract with the recycler assures that the confidentiality of Data data will be protected. Paper documents containing Confidential Information confidential information requiring special handling (e.g. e.g., protected health information) ). On-site shredding, pulping, or incineration incineration. Optical discs (e.g. CDs or DVDs) ). Incineration, shredding, or completely defacing the readable surface with a coarse abrasive abrasive. Magnetic tape tape. Degaussing, incinerating or crosscut shredding.

Data Disposition. When the contracted Agreement work has been completed or when the Data is no longer needed, except as noted above in Section 5.bsubsection 7.6.2 above, Data shall be returned to DSHS DSHS/County or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, firm provided the contract with the recycler assures specifies that the confidentiality of Data will be protected, and the information destroyed through the process. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse course abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b, Data shall be returned to DSHS DOC or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.bsubsections d (1) and d (4) (b) above, Data shall be returned to DSHS or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, firm provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b4.b above, Data shall be returned to DSHS or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, firm provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) DVDs Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b4.b, Data shall be returned to DSHS SE WA ALTC COG or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “"wipe” " utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk disk. Paper documents with sensitive or Confidential Information Recycling through a contracted firm, provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. e.g protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When If data destruction is required by the contracted work has been completed Contract, the data must be destroyed using one or when more of the Data is no longer needed, except as noted above in Section 5.b, Data shall be returned to DSHS or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as followsfollowing methods: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs disks Using a “wipe” ―wipe‖ utility which will overwrite the Data data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data data cannot be reconstructed, or Physically destroying the disk , or Delete the data and physically and logically secure data storage systems that continue to be used for the storage of confidential data to prevent any future access to stored information. One or more of the preceding methods is performed before transfer or surplus of the systems or media containing the data. Paper documents with sensitive confidential data On-site shredding, pulping, or Confidential Information incineration, or Recycling through a contracted firm, firm provided the contract with the recycler assures that the confidentiality of Data will be data is protected. Paper documents containing Confidential Information confidential information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse course abrasive Magnetic tape Degaussing, incinerating or crosscut shreddingshredding Removable media (e.g. floppies, USB flash drives, portable hard disks, Zip or similar disks) Using a ―wipe‖ utility which will overwrite the data at least three (3) times using either random or single character data Physically destroying the disk Degaussing magnetic media sufficiently to ensure that the data cannot be reconstructed

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b3. Protection of Data b. Network Server Disks above, Data shall be returned to DSHS or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Data stored on: Will be destroyed by: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Data stored on: Will be destroyed by: Paper documents with sensitive or Confidential Information Information, including information that requires special handling, such as protected health information. On-site shredding, pulping, or incineration OR Recycling through a contracted firm, firm provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b, Data shall be returned to DSHS or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Data stored on: Will be destroyed by: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) information On-site shredding, pulping, pulping or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.bProtection of Data, Data shall be returned to DSHS or destroyed. Media the Contractor will certify in writing that the data stored on which Data may be stored and associated acceptable the media listed below was destroyed utilizing the approved methods of destruction are as followsoutlined in the following table: Server or workstation hard disks, disks or Removable media (e.g. floppies, USB flash drives, portable hard disks) , Zip or similar disks), excluding optical discs Using a “wipe” utility which will overwrite the Data data at least three (3) times using either random or single character data, or data Degaussing sufficiently to ensure that the Data data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information confidential data Recycling through a contracted firm, firm provided the contract with the recycler assures that the confidentiality of Data data will be protectedprotected and the information destroyed through the recycling process. Paper documents containing Confidential Information confidential information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse course abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.bB.2 above, Data data shall be returned to DSHS the County or destroyed. Media on which Data data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable removable media (e.g. floppies, USB flash drives, portable hard disks, Zip or similar disks) excluding optical discs 1. Using a “wipe” utility which will overwrite the Data data at least three (3) times using either random or single character data, or ; 2. Degaussing sufficiently to ensure that the Data data cannot be reconstructed, ; or 3. Physically destroying the disk disk. Paper documents with sensitive or Confidential Information confidential data Recycling through a contracted firm, firm provided the contract with the recycler assures that the confidentiality of Data data will be protected. Paper documents containing Confidential Information confidential information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration incineration. Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive course abrasive. Magnetic tape Degaussing, incinerating or crosscut shredding.

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b4.b above, Data shall be returned to DSHS or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “wipe” utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, firm provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding

Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b3. Protection of Data b. Network Server Disks above, Data shall be returned to DSHS HCA or destroyed. Media on which Data may be stored and associated acceptable methods of destruction are as follows: Server or workstation hard disks, or Removable media (e.g. floppies, USB flash drives, portable hard disks) excluding optical discs Using a “"wipe” " utility which will overwrite the Data at least three (3) times using either random or single character data, or Degaussing sufficiently to ensure that the Data cannot be reconstructed, or Physically destroying the disk Paper documents with sensitive or Confidential Information Recycling through a contracted firm, firm provided the contract with the recycler assures that the confidentiality of Data will be protected. Paper documents containing Confidential Information requiring special handling (e.g. protected health information) On-site shredding, pulping, or incineration Optical discs (e.g. CDs or DVDs) Incineration, shredding, or completely defacing the readable surface with a coarse abrasive Magnetic tape Degaussing, incinerating or crosscut shredding