06/20/2017 - Laserfiche WebLink

Home Browse Search

EXHIBIT A - COUNTY USE AND SECURITY REQUIREMENTS The County agrees to comply with the following use and security requirements: That the information obtained from the Department's system pursuant to the MOA (hereinafter "the limited FLORIDA data") is confidential in nature and protected from disclosure by State and Federal Law. 2. To restrict the transmission of the limited FLORIDA data using secure file transfer protocols to County personnel who have a verifiable need to know in the performance of their official duties for the purposes stated in Section 3. of the MOA and that the limited FLORIDA data will be used and disclosed only for such purposes. 3. To maintain a listing of County personnel granted on-line access privileges to the Department's system pursuant to this MOA and, upon request, make such information available to the Department. At a minimum, the list will include the user's first and last name, User Identification (USERID), date access was granted/changed/deleted, dates of initial security training and annual awareness training. This information will be maintained for a period of five (5) years after access has been terminated or until administrative purposes have been served, whichever is longer. 4. To abide by IT Security Awareness training provided by the Department at http://www.m)dlfamilies.com/about-us/dcf-training or an equivalent security training provided to County employees. Initial and annual refresher IT Security Awareness training shall be documented. The Department reserves the right to review the County training for required elements. 5. To comply with State of Florida network security requirements specified in Chapter 74-2 of the Florida Administrative Code. 6. That the limited FLORIDA data may not be re -disclosed by the County or its personnel verbally, electronically or in any other form except as specifically authorized by law or regulation. 7. That the limited FLORIDA data shall be stored in a place physically secure from access by unauthorized persons and to safeguard access to the limited FLORIDA data in such a way that unauthorized persons cannot view, print, copy or retrieve the information by any means. 8. To instruct all personnel granted on-line access privileges to the Department's system or granted access to the limited FLORIDA data in the County's possession regarding- the confidential nature' of the information, the safeguards and requirements of this MOA and the provisions specified in Chapters 74-2 of the Florida Administrative Code, as well as Chapters 39, 119, 282.318, 501, 812, 815, 839 or 877, Florida Statutes, and all applicable federal requirements. . To adhere to the confidentiality requirements stated herein, and to fully and promptly report any infraction of these requirements to the respective contacts specified in #16 of the MOA. 10. To promptly notify the Department of any breach of security related to the limited FLORIDA data in its possession and to be responsible for full compliance with section 501.171, F.S., if applicable, in the event of a breach of security concerning confidential personal information in its possession received from one another, including but not limited to, providing notification to affected persons and to provide any such breach notification, if applicable, to the Department for prior review and approval of the contents of the notice. 5 1 P a g e P77