Destruction of PI during Contract Term. The Contractor shall retain PI during the course of the Contract in accordance with the terms of this Agreement and all applicable state and federal retention laws and regulations. If, in accordance with such requirements, Contractor determines that, during the course of the Contract, it is appropriate to destroy PI, it shall do so only after obtaining EOHHS’ written permission. In the event destruction is permitted, Contractor shall destroy PI in accord with standards set forth in NIST Special Publication 800- 88, Guidelines for Media Sanitization, M.G.L. c. 93I and other Applicable Laws relating to the destruction of confidential information, including PI, all applicable state and federal retention laws and regulations, and all state data security policies including policies issued by EOHHS and EOTSS made known to the Contractor. Within five (5) days of destroying PI in accordance with the requirements of this paragraph, Contractor shall provide EOHHS with a written certification that destruction has been completed in accord with the required standards set forth herein.
Appears in 5 contracts
Samples: Appendix H, Business Associate Data Management and Confidentiality Agreement, Management and Confidentiality Agreement
