55A - RESO - AA - AGMT - WIOA FUNDS

Home Browse Search

requirements must be included in the subcontracts: (1). All client information submitted over the iuternet to the subcontractor's databases must be protected, at a minimum, by 328 -bit Secure socket Layer (SSL) encryption. Clients' social security numbers must be stared in a separate database within the subcontractor's network of servers, and protected by a firewall and a secondary database server firewall or AES1 data encryption. If a subcontractor receives client social security numbers or other confidential information in the course of business, for example a resume- distribution service that provides enrollment in CalJGBS, social security numbers must be destroyed within two days attsr the client registers for Ca1JOPS. If a subcontractor obtains confidential information as an agent of the subgrantee, the subcontract must specifically state the purpose for the data collection and the term of records retention must be stated, and directly related, to the purpose and use of the information. In accordance with Uniform Guidance 2 CFR Part 200 and DOE Exceptions 2 CFA Part 2900, social security numbers and Other client specific information shall not be retained for more than three years after a client completes services. The aubgrantee should extend this period, only if any litigation, Claim, negotiation, audit, or other action involving the records has been started before the end of the three -year retention period. In this case the records should be maintained until completion of the action and resolution of all issues arising from it, or until the close of the three -year retention period, whichever is later. Uniform Guidance 2 CFR Part 200 and DOL Exceptions 2 CPR Part 2900. (2). Client information (personal information that identifies a client such as name and social security number) and /or demographic information of a client (such as wage history, address, and previous employment) shall not be used as a basis for commercial solicitation during the time the client or agency is using the subcontractor's services. Client information and /or demographic information shall not be used for any purposes other than those specific program purposes set forth in the subcontract. (S). An AJCC Client must still be given the option to use the AJCC's services, including Cd1JOBS, even if he or she chooses not to use any services of the subcontractor. This option shall be prominently, clearly and immediately communicated to the client upon registration within the AJCC or for CalJOBS, the subcontractor's resume - distribution services, or any other services subcontractor offers to the client or the AJCC Operator, (4). The subcontractor must clearly disclose all of its potential and intended uses of the client's personal and /or demographic information for the services the client seeks and for any other services the subcontractor offers. The subcontractor shall not use a client's personal and /or demographic information without the client's prior permission, A link to the subcontractor's Privacy Policy shall appear prominently on the registration screens that list the potential and intended uses of the client's personal and /or demographic information, (5). When the °pass- through" entity modifies State automated systems such as the State CalJOBS System, it shall provide reasonablo notice of ouch changes to the Subgrantee. The Subgrantee shall be responsible to communicate ouch changes to the AJCC operators) in the local area. m). Each party shall designate an employee who shall be responsible for overall security and confidentiality of its data and information systems and oacb party shall notify the other of any changes in that designation. As of this date, the fallowing are those individuals: FOR THE "PASS - THROUGH" ENTITY Name: Jaime Gutierrez Title: Section Manager Addr000: P.O. Box 826850, MIC 50 Sacramento, CA "280 -0001 Telephone: (916) 654 -9699 Fax: (916) 654 -9586 FOR THE SUBGRANTEE Deborah Sanchez Title; Economic Development Specialist III Telephone, (714) 565 -2621 Fax: (71.4) 565 -2602 21. Signatures This subgrant agreement is of no force and effect until signed by both of the parties hereto. Subgrantee will not commence performance prior to the beginning of this subgrant agreement. Page 13 of 13 55A -19