Common use of Data Destruction Clause in Contracts

Data Destruction. 9.17.7.1 When Subrecipient has maintained, processed or stored County Information Assets, implied or expressed, and such County Information Assets are no longer required to be retained by Subrecipient under this Subaward and applicable law, County shall have sole authority to determine when Subrecipient shall destroy any such County Information Assets as described herein. Subrecipient shall only proceed with the destruction of County Information Assets (which may be stored on purchased, leased or rented electronic storage equipment (e.g., printers, hard drives, etc.) and electronic devices (e.g., servers, workstations, etc.) that are geographically located within Los Angeles County or external to Los Angeles County's boundaries) upon receiving written authorization from County. 9.17.7.2 Subrecipient shall destroy such County Information Assets by: 9.17.7.2.1 Shredding or otherwise destroying paper, film, disk drives or other hard copy media so that the Personally Identifiable Information, Protected Health Information and Medical Information cannot be read or otherwise reconstructed. 9.17.7.2.2 Clearing, purging or destroying electronic media containing Personally Identifiable Information, Protected Health Information and Medical Information consistent with National Institute of Standards and Technology ("NIST") Special Publication ("SP") 800-88 (Guidelines for Media Sanitization) which is available on-line at: xxxx://xxxx.xxxx.xxx/publications/PubsD rafts.html#SP-800-88-Rev. %201 and United States Department of Defense 5220.22-M data sanitization and clearing directive such that the Personally Identifiable Information, Protected Health Information and Medical Information cannot be retrieved. 9.17.7.3 Subrecipient shall have the sole responsibility to certify that the County Information Assets have been appropriately destroyed consistent with the requirements outlined herein. 9.17.7.4 Subrecipient shall provide County with written certification validating that any and all County Information Assets were placed in one (1) or more of the following stored states: unusable, unreadable and/or indecipherable. Subrecipient shall submit such certification to County's Contract Manager no later than ten (10) days after the occurrence of this event. 9.17.7.5 Lower Tier Subrecipient shall provide County with written certification validating that any and all County Information Assets were destroyed and are in one (1) or more of the following states: unusable, unreadable and/or undecipherable. Lower Tier Subrecipient shall submit such certification to County's Contract Manager no later than ten (10) days after the removal of any electronic storage equipment and devices and the destruction of the County Information Assets.

Data Destruction. 9.17.7.1 9.18.7.1 When Subrecipient Contractor (that is "Subrecipient") has maintained, processed or stored County Information Assets, implied or expressed, and such County Information Assets are no longer required to be retained by Subrecipient Contractor under this Subaward Contract (that is "Subaward") and applicable law, County shall have sole authority to determine when Subrecipient Contractor shall destroy any such County Information Assets as described herein. Subrecipient Contractor shall only proceed with the destruction of County Information Assets (which may be stored on purchased, leased or rented electronic storage equipment (e.g., printers, hard drives, etc.) and electronic devices (e.g., servers, workstations, etc.) that are geographically located within Los Angeles County or external to Los Angeles County's boundaries) upon receiving written authorization from County. 9.17.7.2 Subrecipient 9.18.7.2 Contractor shall destroy such County Information Assets by: 9.17.7.2.1 9.18.7.2.1 Shredding or otherwise destroying paper, film, disk drives or other hard copy media so that the Personally Identifiable Information, Protected Health Information and Medical Information cannot be read or otherwise reconstructed. 9.17.7.2.2 9.18.7.2.2 Clearing, purging or destroying electronic media containing Personally Identifiable Information, Protected Health Information and Medical Information consistent with National Institute of Standards and Technology ("NIST") Special Publication ("SP") 800-88 (Guidelines for Media Sanitization) which is available on-line at: xxxx://xxxx.xxxx.xxx/publications/PubsD rafts.html#SP-800-88-Rev. %201 and United States Department of Defense 5220.22-M data sanitization and clearing directive such that the Personally Identifiable Information, Protected Health Information and Medical Information cannot be retrieved. 9.17.7.3 Subrecipient 9.18.7.3 Contractor shall have the sole responsibility to certify that the County Information Assets have been appropriately destroyed consistent with the requirements outlined herein. 9.17.7.4 Subrecipient 9.18.7.4 Contractor shall provide County with written certification validating that any and all County Information Assets were placed in one (1) or more of the following stored states: unusable, unreadable and/or indecipherable. Subrecipient Contractor shall submit such certification to County's Contract Manager no later than ten (10) days after the occurrence of this event. 9.17.7.5 9.18.7.5 Subcontractor (that is "Lower Tier Subrecipient Subrecipient") shall provide County with written certification validating that any and all County Information Assets were destroyed and are in one (1) or more of the following states: unusable, unreadable and/or undecipherable. Lower Tier Subrecipient Subcontractor shall submit such certification to County's Contract Manager no later than ten (10) days after the removal of any electronic storage equipment and devices and the destruction of the County Information Assets.

Data Destruction. 9.17.7.1 9.16.7.1 When Subrecipient Contractor has maintained, processed or stored County Information Assets, implied or expressed, and such County Information Assets are no longer required to be retained by Subrecipient Contractor under this Subaward Master Agreement and applicable law, County shall have sole authority to determine when Subrecipient Contractor shall destroy any such County Information Assets as described herein. Subrecipient Contractor shall only proceed with the destruction of County Information Assets (which may be stored on purchased, leased or rented electronic storage equipment (e.g., printers, hard drives, etc.) and electronic devices (e.g., servers, workstations, etc.) that are geographically located within Los Angeles County or external to Los Angeles County's boundaries) upon receiving written authorization from County. 9.17.7.2 Subrecipient 9.16.7.2 Contractor shall destroy such County Information Assets by: 9.17.7.2.1 9.16.7.2.1 Shredding or otherwise destroying paper, film, disk drives or other hard copy media so that the Personally Identifiable Information, Protected Health Information and Medical Information cannot be read or otherwise reconstructed. 9.17.7.2.2 9.16.7.2.2 Clearing, purging or destroying electronic media containing Personally Identifiable Information, Protected Health Information and Medical Information consistent with National Institute of Standards and Technology ("NIST") Special Publication ("SP") 800-88 (Guidelines for Media Sanitization) which is available on-line at: xxxx://xxxx.xxxx.xxx/publications/PubsD rafts.html#SP-800-88-Rev. %201 and United States Department of Defense 5220.22-M data sanitization and clearing directive such that the Personally Identifiable Information, Protected Health Information and Medical Information cannot be retrieved. 9.17.7.3 Subrecipient 9.16.7.3 Contractor shall have the sole responsibility to certify that the County Information Assets have been appropriately destroyed consistent with the requirements outlined herein. 9.17.7.4 Subrecipient 9.16.7.4 Contractor shall provide County with written certification validating that any and all County Information Assets were placed in one (1) or more of the following stored states: unusable, unreadable and/or indecipherable. Subrecipient Contractor shall submit such certification to County's Contract Master Agreement Manager no later than ten (10) days after the occurrence of this event. 9.17.7.5 Lower Tier Subrecipient 9.16.7.5 Subcontractor shall provide County with written certification validating that any and all County Information Assets were destroyed and are in one one (1) or more of the following states: unusable, unreadable and/or undecipherable. Lower Tier Subrecipient Subcontractor shall submit such certification to County's Contract Master Agreement Manager no later than ten (10) days after the removal of any electronic storage equipment and devices and the destruction of the County Information Assets.

Data Destruction. 9.17.7.1 When Subrecipient has maintained, processed or stored County Information Assets, implied or expressed, and such County Information Assets are no longer required to be retained by Subrecipient under this Subaward and applicable law, County shall have sole authority to determine when Subrecipient shall destroy any such County Information Assets as described herein. Subrecipient shall only proceed with the destruction of County Information Assets (which may be stored on purchased, leased or rented electronic storage equipment (e.g., printers, hard drives, etc.) and electronic devices (e.g., servers, workstations, etc.) that are geographically located within Los Angeles County or external to Los Angeles County's boundaries) upon receiving written authorization from County. 9.17.7.2 Subrecipient shall destroy such County Information Assets by: 9.17.7.2.1 Shredding or otherwise destroying paper, film, disk drives or other hard copy media so that the Personally Identifiable Information, Protected Health Information and Medical Information PSCI cannot be read or otherwise reconstructed. 9.17.7.2.2 Clearing, purging or destroying electronic media containing Personally Identifiable Information, Protected Health Information and Medical Information PSCI consistent with National Institute of Standards and Technology ("NIST") Special Publication ("SP") 800-88 (Guidelines for Media Sanitization) which is available on-line at: xxxx://xxxx.xxxx.xxx/publications/PubsD rafts.html#SP-800-88-Rev. %201 and United States Department of Defense 5220.22-M data sanitization and clearing directive such that the Personally Identifiable Information, Protected Health Information and Medical Information PSCI cannot be retrieved. 9.17.7.3 Subrecipient shall have the sole responsibility to certify that the County Information Assets have been appropriately destroyed consistent with the requirements outlined herein. 9.17.7.4 Subrecipient shall provide County with written certification validating that any and all County Information Assets were placed in one (1) or more of the following stored states: unusable, unreadable and/or indecipherable. Subrecipient shall submit such certification to County's Contract Manager no later than ten (10) days after the occurrence of this event. 9.17.7.5 Lower Tier Subrecipient shall provide County with written certification validating that any and all County Information Assets were destroyed and are in one (1) or more of the following states: unusable, unreadable and/or undecipherable. Lower Tier Subrecipient shall submit such certification to County's Contract Manager no later than ten (10) days after the removal of any electronic storage equipment and devices and the destruction of the County Information Assets.

Data Destruction. 9.17.7.1 9.17.6.1 When Subrecipient has maintained, processed or stored County Information Assets, implied or expressed, and such County Information Assets are no longer required to be retained by Subrecipient under this Subaward and applicable law, County shall have sole authority to determine when Subrecipient shall destroy any such County Information Assets as described herein. Subrecipient shall only proceed with the destruction of County Information Assets (which may be stored on purchased, leased or rented electronic storage equipment (e.g., printers, hard drives, etc.) and electronic devices (e.g., servers, workstations, etc.) that are geographically located within Los Angeles County or external to Los Angeles County's boundaries) upon receiving written authorization from County. 9.17.7.2 9.17.6.2 Subrecipient shall destroy such County Information Assets by: 9.17.7.2.1 Shredding 9.17.6.2.1 Cross-cut shredding or otherwise destroying paper, film, disk drives or other hard copy media so that the Personally Identifiable Information, Protected Health Information and Medical Information cannot be read or otherwise reconstructed. 9.17.7.2.2 9.17.6.2.2 Clearing, purging or destroying electronic media containing Personally Identifiable Information, Protected Health Information and Medical Information consistent with National Institute of Standards and Technology ("NIST") Special Publication ("SP") 800-88 (Guidelines for Media Sanitization) which is available on-line at: xxxx://xxxx.xxxx.xxx/publications/PubsD rafts.html#SP-800-88-Rev. %201 xxxx://xxxx.xxxx.xxx/publications/PubsDrafts.html#SP- 800-88-Rev.%201 and United States Department of Defense 5220.22-M data sanitization and clearing directive such that the Personally Identifiable Information, Protected Health Information and Medical Information cannot be retrieved. 9.17.7.3 9.17.6.3 Subrecipient shall have the sole responsibility to certify that the County Information Assets have been appropriately destroyed consistent with the requirements outlined herein. 9.17.7.4 9.17.6.4 Subrecipient shall provide County with written certification validating that any and all County Information Assets were placed in one (1) or more of the following stored states: unusable, unreadable and/or indecipherable. Subrecipient shall submit such certification to County's Contract Manager no later than ten (10) days after the occurrence of this event. 9.17.7.5 9.17.6.5 Lower Tier Subrecipient shall provide County with written certification validating that any and all County Information Assets were destroyed and are in one (1) or more of the following states: unusable, unreadable and/or undecipherable. Lower Tier Subrecipient shall submit such certification to County's Contract Manager no later than ten (10) days after the removal of any electronic storage equipment and devices and the destruction of the County Information Assets.