Laserfiche WebLink
XXIX. EMERGENCY RESPONSE <br />A. The Agency shall prepare and submit within six months of the execution of the <br />Contract the necessary plans, procedures and protocols to: <br />Respond to and recover from a natural disaster or major disruption to agency <br />operations such as a work stoppage; and <br />2. Continue operations during a prolonged event such as a pandemic. <br />B. The Agency shall conduct exercises or drills to test the effectiveness of its plans at <br />least once a year and document the results of the exercise or drill. <br />C. The Agency shall prepare the plans in a format approved by the County. The <br />explanation of the format will include the specific content of the Agency's plans. The <br />County will specify areas that must be addressed in the Agency's plan. <br />D. The County may waive the requirements in subsections A, B or C upon written request <br />by the Agency identifying compelling reasons why such requirements should not apply. <br />XXX. PERSONAL INFORMATION NOTICE OF SECURITY BREACH <br />A. If the Agency maintains computerized or other forms of data that includes personal <br />information owned by the County, the Agency shall notify the County of any breach of <br />the security of data immediately following discovery if the personal information was, <br />or is reasonably believed to have been, acquired by an unauthorized person in <br />accordance with RCW 42.56.590 (2). <br />B. The Agency shall provide all information requested by the County including the <br />following in accordance with RCW 42.56.590, KCC 2.14.030, the King County <br />Information Privacy Policy and any other applicable federal, state and local statute: <br />Circumstances associated with the breach; <br />2. Actions taken by the Agency to respond to the breach and <br />3. Steps the Agency shall take to prevent a similar occurrence. <br />This information shall be provided in a format requested by the County. <br />C. The County may at its sole discretion, require the Agency to contact the appropriate <br />law enforcement agency and to provide the County a copy of the report of the <br />investigation conducted by the law enforcement agency. The Agency shall also provide <br />the County with any information it has regarding the security breach. <br />D. The Agency shall conspicuously display King County's Privacy Notice and provide a <br />printed copy upon request. <br />E. The Agency shall be responsible for notifying individuals whose personal information <br />may have become available to unauthorized users through a security breach. The <br />Agency shall also be responsible for any cost associated with notifying the affected <br />individuals. This notification must be in accordance with RCW 42.56.590 (7). <br />F. If the Agency demonstrates that the cost of providing notice would exceed $250.000, or <br />that the potentially affected persons exceeds 500.000, or the Agency does not have <br />sufficient contact information, substitute notice shall consist of the following in <br />accordance with RCW 42.56.590 (7) (c). <br />City of Tukwila Page 18 of 19 2011 Contract <br />