CALIFORNIA, STATE OF (2) - Laserfiche WebLink

Home Browse Search

EDD Agreement Number. M0113589 EDD/SAPD Customer Codes: E00663 Page 3 of 3 EXHIBIT D (Standard Agreement) c. Disclosure of any of the EDD information to any person or entity not specifically authorized in this Agreement is strictly prohibited. Personnel assigned to work with the EDD's confidential information shall not reveal or divulge to any person or entity any of the confidential information provided under this Agreement except as authorized or required by law. IV. PHYSICAL SAFEGUARDS a. Take precautions to ensure that only authorized personnel are given access to physical, electronic and on-line files. Store electronic and hard copy information in a place physically secure from access by unauthorized persons. Process and store information in electronic format, such as magnetic tapes or discs, in such a way that unauthorized persons cannot retrieve the information by means of computer, remote terminal, or other means. b. Secure and maintain any computer systems (network, hardware, and software applications) that will be used in the performance of this Agreement. This includes ensuring that all security patches, upgrades, and anti -virus updates are applied as appropriate to secure data that may be used, transmitted, or stored on such systems in the performance of this Agreement. c. Store all the EDD's confidential documents in a physically secure manner at all times to prevent unauthorized access. d. Store the EDD's confidential electronic records in a secure central computer facility. Where in -use on a shared computer system or any shared data storage system, ensure appropriate information security protections are in place. SAPD shall ensure that appropriate security access controls, storage protections and use restrictions are in place to keep the confidential information in the strictest confidence and shall make the information available to Its own personnel on a "need -to -know" basis only. e. Store the EDD's confidential data in encrypted format when recorded on removable electronic storage media, or on mobile computing devices, such as a laptop computer. f. Maintain an audit trail and record data access of authorized users and authorization level of access granted to the EDD's data, based on job function. g. Direct all personnel permitted to use the EDD's data to avoid leaving the data displayed on their computer screens where unauthorized users may view it. Personnel should retrieve computer printouts as soon as they are generated so that the EDD's data is not left unattended in printers where unauthorized personnel may access them. h. Dispose of confidential Information obtained from the EDD, and any copies thereof made by SAPID, after the purpose for which the confidential information is disclosed is served. Disposal means return of the confidential information to the EDD or destruction of the information utilizing an approved method of confidential destruction, which includes electronic deletion (following Department of Defense specifications) shredding, burning, or certified or witnessed destruction. Confidentiality Requirements STD. (Rev 03/08/20161