55B - RESO - WIA AGMT FOR PROGRAM 14-15

Home Browse Search

WIA SU30RANT ACREEMENT Subgrantee: SANTA ANA WORK CENTER Exhibit BB Page 13 of 14 SUOGRAN: No: K594782 WDIPICAT:Cls NO: NEW confidential information: shredding, burning, or certified or witnessed destruction. Magnetic media are to be degaussed or returned to the other party. k). If the Subgrantor or Subgrantee enters into an agreement with a third party to provide NIA services, the Subgrantor or Subgrantee agrees to include these data and security and confidentiality requirements in the agreement with that third party. In no event shall said Information be disclosed to any individual outside of that third party's authorised staff, subcontractor(s), service providers, or employees. 1) . The Subgrantee may, in Its operation of the Me- Stops, permit a One -Stop Operator to enter Into a Subcontract to manage confidential information. This subcontract may, allow an individual to register for resume- distribution services at the asset time the individual enrolls in CalOOBS. Subgrantee shall ensure that all such subcontracts comply with the intellectual property requirements of paragraph 19 of this Subgrant, the oonfidertlality requirements of paragraph 2C of this Subgrent and any other terms of this Subgrart that may be applicable. In addition, the following requirements must be included in the subcontracts: (1) All client information submitted over the Internet to the subcontractor's databases must be protected, at a minimum, by 129 -bit Secure Socket Layer 199L) encryption. Clients' social security numbers must be stored in a separate database within the subcontractor's network of servers, and protected by a firewall and a eeeondary database server firewall or ASS data encryption. It a subcontractor receives client Social security numbers or other confidential Sntormacion in the course of business, for example a resume - distribution service that provides enrollment in CtIJODS, social security numbers must be destroyed within two days after the client registers for CaLmBS. If a subcontractor obtains confidential information as an agent of the subgrantee, the subcontract must specifically state the purpose for the data collection and the term of records retention meet be stated, and directly related, to the purpose and use of the inform Lion. in accordance wiht 29 Coda of Mental Regulations 97.42, social security numbers and other client specific information shall not be retained for more then three years after a client Completes services. The subgrantee should extend this period, only if any litigation, claim, negotiation, audit, or other action involving the records has been started before the and of the the three -year retentioa period. In this case the records should be maintained until completion of the action sad resolution of all issues arising iron it, or until the close of the three -year retention period, whichever is later. (29 CSR sec. 99.42 (b)(2).) (2) Client information (personal information than identifies a client such as name and social security number) anal /or demographic information of a client (such as wage history, address, and previous employment) shall rot be used as a basis for Cortmercial solicitation during the time the client or agency is using the subcontractor's services Client information and /or demographic information shall not be used for any purposes other than those specific program purposes set forth in the subcontract. (0) A One -Stop client moat still he given the option to use the One - Stop's services, including CalJOBS, even if he or she chooses not to use any services of the subcontractor. This option shall be prominently, clearly, and immediately communicated to the client upon registration within the One -Stop or for Ca1JOSS, the subcontractor's resume - distribution services, or any other services subcontractor offers to the client or the One -Stop Operator. (4) The subcontractor must clearly disclose all of its potential and intended uses of the client's personal and /or demographic information for the services the clients seeks and for any other services the subcontractor offers. The subcontractor shall not use a client's personal and /or demographic information without the client's prior permission. A link to the subcontractor's Privacy Policy shall appear prominently on the registration screens that list the potential and intended uses of the client's personal and /or demographic information. (51 when the Subgrar-tnr modifies State automated systems such as the State CalJOHS System, it shall provide reasonable notice of such etanges to the Subgrantee. The Subgrantee shall be responsible to communicate such changes W tha One -Stop Operator(s) in the Local. area m;. Each party shall deetgnste an employee who shall be responsible for overall security and confidentiality of its data and information systems and each party shall notify the other of any changes in that designation. As of this date, the following are these individuals: FOR THE SUBGRAHTOA .Name: Cindy Hobart Title: Section Manager Address: P.O. Box 826980, M:C 63 Sacramento, CA 9428)-0 OOi Telephone: 1916) 651 -5955 55B -19