CA EMPLOYMENT DEV DEPT 6 - 2007 - Laserfiche WebLink

Home Browse Search

- WIA SUBGRANT AGREEMENT Exhibit BB Subgrantee: SANTA ANA WORK CENTEk Page 12 of 14 SUBGRANT NO: R865489 MODIFICATION NO: NEW a}. Each party shall keep all confidential information that is exchanged between them in the strictest confidence and make such information available to their own employees only on a "need-co-know^ basis. b). Each party shall provide security sufficient to ensure protection of hcsicadenandltechnicallon from improper use and disclosures, including sufficient administrative, p y safeguards to protect this information from reasonable unanticipated threats to the security ox' confidentiality of the information. c). The Subgrantee agrees that information obtained under this subgrant agreement will not be reproduced, published., sold or released in original or in any other form for any purpose other than those specifically identified in this agreement. i. Aggregate Summaries• All reports and/or publications developed by the Subgrantee based on data obtained under this agreement shall contain confidential data in aggregated or statistical summary form only. "Aggregated" refers to a data ouput that does not allow identification of an individual or employer unit. ii. Publication: Prior to. publication, Subgrantee shall carefully analyze aggregated data outputs to ensure the identity of individuals and/or employer units cannot be inferred pursuant to Umemployment Insurance Code section 1094(c). Personal identifiers must be removed. Geographic identifiers should be specified only in large areas and as needed, and variables should be recorded in order to protect confidentiality. iii. Minimum Data Cell Size: The minimum data cell size or derivation, thereof shall be three participants for any data table released to outside parties or to the public. di- Each party agrees that no disaggregate data, identifying individuals or employers, shall be released to outside parties or to the public. ei. The Subgrantee shall notify Subgrantor's Information, Security Office of aCelechone at attempted information security incidents, withinTncidenrs includelabuaearetnot,limited to, any event !9161 654-6231. Information Security (intentional or unintentional), that causes the loss, damage, or destruction, or unauthorized access, use,. modification, or disclosure of information assets. The Subgrantee shall cooperate with the Subgrantor in any investigations of security incidents. The system or device affected by an information security incident and containing confidential data obtained in the administration of this program shall be immediately removed from operation upon confidential data exposure or a known security breach. It shall remain removed from operation until correctiori and mitigation measures are applied. If the Subgrancee learns of a breach in the security of the system which contains confidential data obtained under this Subgrant, then the Subgrantee must provide notification to individuals pursuant to_Civil Code section 1798.82. f). The Subgrantee shall provide for the management and control of Phymobileacomsutin ldeovicesion assets (including personal computer systems., computer terminals, P g and various electronic storage media) used in performance of this Subgrant. This shall include, but is not limited to, security measures to physicall}'-eventionaadetectionmsandnsuppression of from unauthorized access and malicious activity; the p~ fires; and the prevention, detection, and minimization of water damage. g). At no time will confidential data obtained pursuant to this agreement be placed on a mobile computing device, or on any form of removable electronic storage media of any kind unless the data are fully encrypted. h). Each party shall provide its employees with access to confidential information with written instructions fully disclosing and explaining the penalties for unauthorized use or disclosure of confidential information found in section 1798.55 of the Civil Code, section 502 of the Penal Code, section 2111 of the Unemployment Insurance Code, section 10850 of the Welfare and Institutions Code and other applicable local, state and federal laws. i). EacY, parcy_shall (where it is appropriate} store and process information in electronic format, in such away that unauthorized persons cannot reasonably retrieve the information by means of a computer. j). Each party shall promptly return to the other party confidential information when its use ends, or destroy the confidential -information. utilizing ar, approved method of destroying confidential information: shredding, burning, or certified or witnessed destruction. Magnetic media are tc be degaussed or returned to the other party. k) If the Subgrantor or Subgrantee enters into an agreement with a third party to provide wIA services, [he Subgrantor or Subgrancee agrees to include these data and security and confidentiality requirements in the agreement with that third party. In nc event shall said information be disclosed to any individual outside of that third party's authorized staff,