Data Destruction. When no longer needed, all County PHI or PI must be cleared, purged, or destroyed consistent with NIST Special Publication 800-88, Guidelines for Media Sanitization such that the PHI or PI cannot be retrieved.
Data Destruction. When no longer needed, all DHCS PHI or PI must be cleared, purged, or destroyed consistent with NIST Special Publication 800-88, Guidelines for Media Sanitization such that the PHI or PI cannot be retrieved.
Data Destruction. When no longer needed, all Department PHI or PI must be wiped using the Xxxxxxx or US Department of Defense (DoD) 5220.22-M (7 Pass) standard, or by degaussing. Media may also be physically destroyed in accordance with NIST Special Publication 800-88. Other methods require prior written permission of the Department Information Security Office.
Data Destruction. Contractor(s) and Vendor(s) that have maintained, processed, or stored the County of Los Angeles’ (“County”) data and/or information, implied or expressed, have the sole responsibility to certify that the data and information have been appropriately destroyed consistent with the National Institute of Standards and Technology (NIST) Special Publication SP 800-88 titled Guidelines for Media Sanitization. Available at: xxxx://xxxx.xxxx.xxx/publications/PubsDrafts.html#SP-800-88 Rev.%201 The data and/or information may be stored on purchased, leased, or rented electronic storage equipment (e.g., printers, hard drives) and electronic devices (e.g., servers, workstations) that are geographically located within the County, or external to the County’s boundaries. The County must receive within 20 business days, a signed document from Contractor(s) and Vendor(s) that certifies and validates the data and information containing PHI and PII were placed in one or more of the following stored states: unusable, unreadable, and indecipherable. Vendor shall certify that any County data stored on purchased, leased, or rented electronic storage equipment and electronic devices, including, but not limited to printers, hard drives, servers, and/or workstations are destroyed consistent with the current National Institute of Standard and Technology (NIST) Special Publication SP-800-88, Guidelines for Media Sanitization. Vendor shall provide County with written certification, within ten (10) business days of removal of any electronic storage equipment and devices that validates that any and all County data was destroyed and is unusable, unreadable, and/or undecipherable.
Data Destruction. When no longer needed, all PII must be cleared, purged, or destroyed consistent with NIST SP 800-88, Guidelines for Media Sanitization, such that the PII cannot be retrieved.
Data Destruction. 9.17.7.1 When Subrecipient has maintained, processed or stored County Information Assets, implied or expressed, and such County Information Assets are no longer required to be retained by Subrecipient under this Subaward and applicable law, County shall have sole authority to determine when Subrecipient shall destroy any such County Information Assets as described herein. Subrecipient shall only proceed with the destruction of County Information Assets (which may be stored on purchased, leased or rented electronic storage equipment (e.g., printers, hard drives, etc.) and electronic devices (e.g., servers, workstations, etc.) that are geographically located within Los Angeles County or external to Los Angeles County's boundaries) upon receiving written authorization from County.
9.17.7.2 Subrecipient shall destroy such County Information Assets by:
9.17.7.2.1 Shredding or otherwise destroying paper, film, disk drives or other hard copy media so that the Personally Identifiable Information, Protected Health Information and Medical Information cannot be read or otherwise reconstructed.
9.17.7.2.2 Clearing, purging or destroying electronic media containing Personally Identifiable Information, Protected Health Information and Medical Information consistent with National Institute of Standards and Technology ("NIST") Special Publication ("SP") 800-88 (Guidelines for Media Sanitization) which is available on-line at: xxxx://xxxx.xxxx.xxx/publications/PubsD rafts.html#SP-800-88-Rev. %201 and United States Department of Defense 5220.22-M data sanitization and clearing directive such that the Personally Identifiable Information, Protected Health Information and Medical Information cannot be retrieved.
9.17.7.3 Subrecipient shall have the sole responsibility to certify that the County Information Assets have been appropriately destroyed consistent with the requirements outlined herein.
9.17.7.4 Subrecipient shall provide County with written certification validating that any and all County Information Assets were placed in one (1) or more of the following stored states: unusable, unreadable and/or indecipherable. Subrecipient shall submit such certification to County's Contract Manager no later than ten (10) days after the occurrence of this event.
9.17.7.5 Lower Tier Subrecipient shall provide County with written certification validating that any and all County Information Assets were destroyed and are in one (1) or more of the following states: unusable, unreadable ...
Data Destruction. Vendor agrees that, upon termination or expiration of the Agreement, it shall erase, destroy, and render unreadable all FIU data from all computer systems and backups, and certify in writing that these actions have been completed within thirty (30) days of the termination of the Agreement or within seven
Data Destruction. Contractor(s) and Vendor(s) that have maintained, processed, or stored the County of Los Angeles’ (“County”) data and/or information, implied or expressed, have the sole responsibility to certify that the data and information have been appropriately destroyed consistent with the National Institute of Standards and Technology (NIST) Special Publication SP 800-88 titled Guidelines for Media Sanitization. Available at: The data and/or information may be stored on purchased, leased, or rented electronic storage equipment (e.g., printers, hard drives) and electronic devices (e.g., servers, workstations) that are geographically located within the County, or external to the County’s boundaries. The County must receive within ten (10) business days, a signed document from Contractor(s) and Vendor(s) that certifies and validates the data and information were placed in one or more of the following stored states: unusable, unreadable, and indecipherable. Vendor shall certify that any County data stored on purchased, leased, or rented electronic storage equipment and electronic devices, including, but not limited to printers, hard drives, servers, and/or workstations are destroyed consistent with the current National Institute of Standard and Technology (NIST) Special Publication SP-800-88, Guidelines for Media Sanitization. Vendor shall provide County with written certification, within ten (10) business days of removal of any electronic storage equipment and devices that validates that any and all County data was destroyed and is unusable, unreadable, and/or undecipherable.
Data Destruction. Contractor(s) that have maintained, processed, or stored County of Los Angeles data and/or information, implied or expressed, have the sole responsibility to certify that the data and information have been appropriately destroyed consistent with the National Institute of Standards and Technology (NIST) Special Publication SP 800-88 titled Guidelines for Media Sanitization. Available at: The data and/or information may be stored on purchased, leased, or rented electronic storage equipment (e.g., printers, hard drives) and electronic devices (e.g., servers, workstations) that are geographically located within the County, or external to the County’s boundaries. The County must receive, within 20 business days of data destruction, a signed document from Contractor that certifies and validates the data and information containing PHI and PII were placed in one or more of the following stored states: unusable, unreadable, and indecipherable. Contractor shall certify that any County data stored on purchased, leased, or rented electronic storage equipment and electronic devices, including, but not limited to printers, hard drives, servers, and/or workstations are destroyed consistent with the current National Institute of Standard and Technology (NIST) Special Publication SP-800-88, Guidelines for Media Sanitization. Contractor shall provide County with written certification, within ten
Data Destruction. Electronic portable media (e.g. CD’s, hard drives, floppy disks, ZIP drives) which contained Intel Classified information must be disposed of in a secure manner (e.g. disk wipe to DOD 5220.22M standard, degauss or physical destruction). Hard copies of Intel Classified information must be disposed of by cross cut shredding or other secure destruction methods
