CA EMPLOYMENT DEV DEPT 6 - 2007 - Laserfiche WebLink

Home Browse Search

WIA SlTBGRANT AGREEMENT Exhibit BB Subgrantee: SANTA ANA WORK CENTER Page 13 of 14 SUBGRANT NO: R8654B9 MODIFICATION NO: NEW subcontraccor(si, service providezs, or employees. The Subgrantee may, in its operation of the One-Stops, permit a One-Stop Operator to enter into a subcontract to manage confidential information. This subcontract may allow an individual to register for resume-distribution services at the same time the individual enrolls in Ca1JOBS. Subgrantes shall ensure that all such subcontracts comply with the intellectual property requirements of paragraph 15 of this Subgrant, the confidentiality requirements of paragraph 20 of this Subgrant and any other terms of this Subgrant that may be applicable. In addition, the following requirements must be included in the subcontracts: (i) All client information submitted over the Internet to the subcontractor's databases must be protected, at a minimum, by 12B-bit Secure Socket Layer (SSLi encryption. Clients' social security numbers must be stored in a separate database within the subcontractor's network of servers, and protected by a firewall and a secondary database server firewall or AES data encryption. If a subcontractor receives client social security numbers or ocher confidential information in the course of business, for e>:ample a resume-distribution service chat provides enrollment in Ca1JOBS, social security numbers must be destroyed within twc days after the client registers for CalJOBS. If a subcontractor obtains confidential information as an agent of the subgrahtee,.the subcontract must specifically state the purpose for the data collection and the term of records retention must be stated, and directly related, to the purpose and use of the information. In accordance wiht 29 Code of Federal Regulations 97.42, social security numbers and other client specific information shall not be retained for more than three years after a client completes services. The subgozaothersa~tionextend this period, only if any litigation, claim, negotiation, audit, involving the records has been started before the end of the the three-year retention period. In this case the records should be maintained until completion of the action and resolution of all issues arising fron it, or until the close of the three-year retention period, whichever is later. (29 CFR sec. 97.42 (b)(2)~) {2i Client information (personal information that identifies a client such as name and social security number) and/or demographic information of a client (such as wage history, address, and previous employment) shall not be used as a basis for commercial soiicita[ion during the time the client or agency is using the subcontractor's services. Client information and/or demographic information shall not be used for any purposes other Char, those specific program purposes set forth in the subcontract. (3) A One-Stop client must still be given the option to use the One-Stop's services, including Ca1JOBS, even if he or she chooses not to use any services of the subcontractor. This option shall be prominently, clearly, and immediately communicated to the client upon registration within the One-Stop or for CalJOBS, the subcontractors resume-distribution services, or any other services subcontractor offers to the client or the One-Stop Operator. (4) The subcontractor must clearly disclose all of its potential and intended uses of the client's personal and/or demographic information for the services the clients seeks and for-any other services .the subcontractor offers. The subcontractor shall not use a client's personal and/or demographic information without the client's prior permission. A link. to the subcontractor's Privacy Policy shall appear prominently on the registration screens that list the potential and intended uses of the client's personal and/or demographic .information. (5) when the Subgrantor modifies State automated systems such as the State Ca1JOBS System, shallabe PesponsiblestoacommunicateosuchcchangesetotohehOneStopnOperator(s~gnachee local area. m). Each party shall designate an employee who shall be responsible for overall security and confidentiality of its data and information systems and each party shall notify the other of any changes in that designation. As of this date, the following are those individuals: FOR THE SUBGRANTOP. Name: Elizabeth J. Cling man Title: Section Manager Address: P.O. Box. 826880, N,IC.69 Sacraments, CA 94280-0001 Telephone: (916) 659-9699 Fax.: (916) 654-9586 FOk TAE SJBGRANTEE Name: F'rgrl ,JutZ1 Title: ~,,~IB Administration/MIS Supervisor Telephone: 714-565-2621