Laserfiche WebLink
DOR Contract Number: K1687 <br />IV. Confidentiality <br />Partner and Revenue each agree to keep confidential and secure from unauthorized use, access, or <br />disclosure all confidential data received under the Agreement. <br />A. Ensuring Security: Partner shall establish and implement physical, electronic, and managerial <br />policies, procedures, and safeguards to ensure that all confidential data exchanged under this <br />Agreement is secure from unauthorized use, access, or disclosure. <br />B. Proof of Security. Revenue reserves the right to monitor, audit, or investigate Partner's security <br />policies, procedures, and safeguards for confidential data. Partner agrees to provide information <br />or proof of its security policies, procedures, and safeguards as reasonably requested by <br />Revenue. <br />V. Statutory Prohibition Against Disclosure; Confidentiality Agreement <br />A. Criminal Sanctions. RCW 19.02.115(2) prohibits the disclosure of Confidential Licensing <br />Information, except as expressly authorized under RCW 19.02.115(3). RCW 82.32.330(2) <br />prohibits the disclosure of Confidential Tax Information except as expressly authorized under <br />RCW 82.32.330(3). It is a misdemeanor for any person acquiring Confidential Licensing <br />Information or Confidential Tax Information under this Agreement to disclose such information in <br />violation of the disclosure limitations stated in RCW 19.02.115 and RCW 82.32.330. Partner will <br />require employees with access to Confidential Licensing Information and/or Confidential Tax <br />Information to sign a copy of the confidentiality agreement attached at Exhibit C. <br />VI. Breach of Confidentiality <br />In the event of any use, access, or disclosure of confidential data by Partner, or its employees or agents <br />in material violation of the terms of this Agreement: <br />A. Partner shall notify Revenue in writing as soon as practicable, but no later than three working <br />days, after determining that a violation has occurred. <br />B. Revenue may immediately terminate this Agreement and require the certified return or <br />destruction of all records containing confidential data received under the Agreement. <br />VIII. Data Security <br />Confidential data provided by Revenue shall be stored in a secure physical location and on Partner - <br />owned devices with access limited to the least number of staff needed to complete the purpose of this <br />Agreement. <br />A. Partner agrees to store data only on one or more of the following media and protect the data as <br />described: <br />1) Workstation hard disk drives <br />a) Access to the data stored on local workstation hard disk drives will be restricted to <br />authorized users by requiring logon to the local workstation using a unique user ID and <br />complex password, passphrase, or other authentication mechanisms which provide equal <br />or greater security, such as biometrics or smart cards. <br />b) If the workstation is not located in a secure physical location, hard drive must be <br />encrypted. <br />c) Workstations must be maintained with current anti-malware or anti -virus software. <br />d) Software and operating system security patches on workstations must be kept current. <br />Page 7 of 10 <br />87 <br />