Law / United States / 
Washington
Written data-sharing agreement before a state agency shares category 3 or higher data with a contractor
RCW 39.26.340; chapter 291, Laws of 2021
In force since .
A sensitive categories rule binding government bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Contract terms, Governance
- Audit expectation
- none
What it requires
- If you are a state agency, have a written data-sharing agreement in place before you share category 3 or higher data, as defined in policy established in accordance with RCW 43.105.054, with a contractor (RCW 39.26.340(1)).
- Make the agreement conform to the policies for data sharing specified by the office of cybersecurity (RCW 39.26.340(1)).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
RCW 39.26.340 requires a written data-sharing agreement before an agency shares category 3 or higher data with a contractor. The section requires no log or record of sharing, requires no audit and preserves the audit authorities of chapter 43.09 RCW.
- Kind
- None
- As of
What this law does
Before an agency shares category 3 or higher data with a contractor, a written data-sharing agreement must be in place, with category 3 defined in policy established in accordance with RCW 43.105.054. The agreement must conform to the policies for data sharing specified by the office of cybersecurity under the authority of RCW 43.105.054. The section does not limit audit authorities under chapter 43.09 RCW.
An agency is any state office or activity of the executive and judicial branches of state government, including state agencies, departments, offices, divisions, boards, commissions, institutions of higher education as defined in RCW 28B.10.016, and correctional and other types of institutions. An agency does not include a comprehensive cancer center participating in a collaborative arrangement as defined in RCW 28B.10.930 that is operated in conformance with RCW 28B.10.930.
A contractor is an individual or entity awarded a contract with an agency to perform a service or provide goods. Chapter 291, Laws of 2021 took effect on .
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .