CALIFORNIA, STATE OF (2) - Laserfiche WebLink

Home Browse Search

EDD Agreement Number: M0113589 EDD/SAPD Customer Codes: E00663 Page 2 of 3 EXHIBIT D (Standard Agreement) g. Notify the EDD Information Security Office (ISO) at (916) 664-6231, immediately upon discovery, that there may have been a breach in security which has or may have resulted in compromise to the confidential information. For purposes of this section, immediately is defined within 24 hours of discovery of the breach. The notification shall be by phone and email. It is not sufficient to simply leave a message. The notification must include a detailed description of the incident (such as time, date, location, and circumstances) and Identify responsible personnel (name, title and contact information). The verbal notification shall be followed with an email notification to . II. MANAGEMENT SAFEGUARDS a. Acknowledge that the confidential Information obtained by SAPD under this Agreement remains the property of the EDD. b. Instruct all personnel assigned to work with the information provided under this Agreement regarding the following: • Confidential nature of the EDD Information. • Requirements of this Agreement. • Sanctions specified in federal and state unemployment compensation laws and any other relevant statutes against unauthorized disclosure of confidential information provided by the EDD. c. Require that all personnel assigned to work with the information provided by the EDD complete the EDD Confidentiality Agreement (Attachment D1): d. Return the following completed documents to the EDD Contract Services Group: o The EDD Indemnity Agreement (Attachment D2): Required to be completed by the SAPD Chief Financial Officer or authorized Management Representative, unless SAPD is a State Agency. o The EDD Statement of Responsibility Information Security Certification (Attachment D3): Required to be completed by the Information Security Officer or authorized Management Representative. e. Permit the EDD to make on -site inspections to ensure that the terms of this Agreement are being met. Make available to the EDD staff, on request and during on -site reviews, copies of the EDD Confidentiality Agreement (Attachment D1) completed by personnel assigned to work with the EDD's confidential information, and hereby made a part of this Agreement. f. Maintain a system of records sufficient to allow an audit of compliance with the requirements under subsection (d) of this part. Permit the EDD to make on -site inspections to ensure that the requirements of federal and state privacy, confidentiality and unemployment compensation statutes and regulations are being met including but not limited to Social Security Act §t 137(a)(5)(r3). Ill. USAGE, DUPLICATION, AND REDISCLOSURE SAFEGUARDS a. Use the EDD's confidential information only for purposes specifically authorized under this Agreement. The information is not admissible as evidence in any action or special proceeding except as provided under section §1094(b) of the UIC. Section 1095(u) of the UIC does not authorize the use of the EDD's confidential information by any private collection agency. b. Extraction or use of the EDD information for any purpose outside the purposes stated in this Agreement is strictly prohibited. The information obtained under this Agreement shall not be reproduced, published, sold, or released in original or any other form not specifically authorized under this Agreement. Confidentiality Requirements STD. [Rev 03108/2016j