ECEAP-Head Start Data Share - Snohomish County

a) Confidential Information provided by DEL will remain the property of DEL and will be returned
to DEL or destroyed when the work for which the information was required has been
completed.
Confidential Information provided by DEL will be dooessed and used only for the purposes of
carrying out activities pursuant to this Contract.
c) Contractor shall not use the information provided for any purpose not specifically authorized
under this Contract.
d) The information provided by DEL will not be duplicated or re-disclosed without the written
authority of DEL.
e) The Contractor shall protect the confidentiality of the information pursuant to this Contract by
adopting and implementing effective physical, electronic, and managerial safeguards against
unauthorized access to and unauthorized disclosure of such information.
f) If the data and analyses generated by the data recipient contain confidential information about
DEL clients, then any and all reports utilizing this data shall be subject to review and approval
by the providing party prior to publication in any medium or presentation in any forum.
8. SAFEGUARDS AGAINST UNAUTHORIZED ACCESS AND REDISCLOSURE
Contractor shall exercise due care to protect all confidential data from unauthorized physical and
electronic access. Both parties shall establish and implement the following minimum physical,
electronic and managerial safeguards for maintaining the confidentiality of information provided by
either party pursuant to this Contract:
a) Access to the information provided by DEL will be restricted to only those authorized staff,
officials, and agents of the parties who need it to perform their official duties in the
performance of the work requiring access to the information as detailed in the Purpose of this
Contract.
b) The Contractor will store the information in an area that is safe from access by unauthorized
persons during duty hours as well as non-duty hours or when not in use.
c) Unless specifically authorized within the Special Terms and Conditions of the Contract, the
Contractor will not store any confidential or sensitive data on portable electronic devices or
media, including, but not limited to laptops, handhelds/PDAs, Ultramobile PCs, flash memory
devices, floppy discs, optical discs (CDs/DVDs), and portable hard disks.
d) The Contractor will protect the information in a manner that prevents unauthorized persons
from retrieving the information by means of computer, remote terminal or other means.
e) The Contractor shall take precautions to ensure that only authorized personnel and agents are
given access to on-line files containing Confidential Information.
f) The Contractor shall instruct all personnel with access to the Confidential Information
regarding the confidential nature of the information, the requirements of the Limitation on
Access and Use and Safeguards Against Unauthorized Access and Re-Disclosure clauses of
this Contract, and the sanctions specified in federal and state laws against unauthorized
disclosure of information covered by this Contract.
g), The Contractor shall take due care and take reasonable precautions to DEL's confidential data
from unauthorized physical and electronic access. Both parties will strive to meet or exceed
the requirements of the Information Services Board (ISB) policies and standards for data
security and access controls to ensure the confidentiality, availability, and integrity of all data
accessed.
9. NOTIFICATION OF COMPROMISE OR POTENTIAL COMPROMISE
If the Contractor or its agents detect a compromise or potential compromise in the information
technology security for this data such that confidential information may have been accessed or
disclosed without proper authorization, the Contractor will give notice within one (1) working day of
discovery to the DEL of such compromise or potential compromise and the compromised party will
Page 2 of 6 Data Access and Management Contract between DEL and CONTRACTOR