Data Sanitization and Safe Disposal. All physical and electronic records must be retained per federal, state and local laws and regulations, including the Local Records Act. Where disposal is approved, the Contractor agrees that prior to disposal or reuse of all magnetic media (e.g. hard disk, floppy disk, removable media, etc.) which may have contained City of Chicago data shall be submitted to a data sanitization process which meets or exceeds DoD 5220.28-M 3-pass specifications. Certification of the completion of data sanitization shall be provided to the City of Chicago within 10 days of completion. Acceptance of Certification of Data Sanitization by the Information Security Office of the City of Chicago is required prior to media reuse or disposal. All other materials which contain City of Chicago data shall be physically destroyed and shredded in accordance to NIST Special Publication 800-88, Guidelines for Media Sanitization, specifications.
Data Sanitization and Safe Disposal. All physical and electronic records must be retained per federal, state and local laws and regulations, including the Local Records Act. Where disposal is approved, the Auditor agrees that prior to disposal or reuse of all magnetic media (e.g. hard disk, floppy disk, removable media, etc.) which may have contained City of Chicago data shall be submitted to a data sanitization process which meets or exceeds DoD 5220.28-M 3-pass specifications. Certification of the completion of data sanitization shall be provided to the City of Chicago within 10 days of completion. Acceptance of Certification of Data Sanitization by the Information Security Office of the City of Chicago is required prior to media reuse or disposal. All other materials which contain City of Chicago data shall be physically destroyed and shredded in accordance to NIST Special Publication 800-88, Guidelines for Media Sanitization, specifications. End of Agreement Data Handling. The Auditor agrees that upon termination of this Agreement it shall return all data to the City of Chicago in a useable electronic form, and erase, destroy, and render unreadable all data in its entirety in accordance to the prior stated Data Sanitization and Safe Disposal provisions. Data must be rendered in a manner that prevents its physical reconstruction through the use of commonly available file restoration utilities. Certification in writing that these actions have been completed must be provided within 30 days of the termination of this Agreement or within 7 days of a request of an agent of the City of Chicago, whichever shall come first. ◙ EXHIBIT 12 CITY OF CHICAGO IDENTIY PROTECTION POLICY City of Chicago Identity Protection Policy Purpose The City of Chicago (the “City”) adopts this Identity Protection Policy pursuant to the Identity Protection Act, 5 ILCS 179/1 et seq. The Identity Protection Act (the “Act”) requires each local and State government agency in Illinois to draft, approve, and implement an Identity Protection Policy to ensure the confidentiality and integrity of Social Security numbers (“SSNs”) that agencies collect, maintain, and use. The purpose of this Policy is to set forth the procedures and restrictions that must be observed by all City employees regarding the use and availability of SSNs belonging to City employees and the public. This Policy is effective immediately.
Data Sanitization and Safe Disposal. When disposing of Protected Information, Contractor agrees to erase, destroy, and render unreadable such Protected Information in [***]=[CONFIDENTIAL PORTION HAS BEEN OMITTED BECAUSE IT (I) IS NOT MATERIAL AND (II) WOULD BE COMPETITIVELY HARMFUL IF PUBLICLY DISCLOSED] its entirety in a manner that prevents its physical reconstruction through the use of commonly available file restoration utilities within thirty (30) days. Once complete, Contractor will provide United with written certification that all Protected Information has been deleted or destroyed as described above.
