Appendix_2_-_Certificate_of_Data_Return_and_Destruction.docx

Appendix 2 Certificate of Data Return and Destruction Upon receipt of a Case Closure Request from the OCC, all copies of the data and any derivative files provided to the Data Recipient by the OCC must be returned to the OCC, as specified in the Case Closure Request. Data must be destroyed using industry best practices and in such a way that no recovery or reconstruction is possible. No data files, or parts of files, are to be retained when the files are returned or destroyed, unless expressly authorized in writing by the data provider.

I _____________________________ an authorized representative of _____________________________ (Name of the Data Custodian) hereby certify that the following data files from the OCC, in their entirety, have been submitted for destruction. In addition, all electronic files have been deleted from the Contractor’s systems: All back-up tapes will automatically rewrite in 90 days and all copies of the files will cease to exist in any production or non-production environment.

I certify that the data described above have been returned or deleted from HCP Systems in compliance with the DUA.

(Signature of IT Representative) (Date)