CALIFORNIA, STATE OF, EMPLOYMENT DEVELOPMENT (3) - 2015

Home Browse Search

California Unemployment Insurance Code, Section 10850 of the California Welfare and Institutions Code and other applicable local, state and federal laws. I. Each party shall (where it is appropriate) store and process information in electronic format, in such a way that unauthorized persons cannot reasonably retrieve the information by means of a computer. j. Each party shall promptly return to the other party confidential information when its use ends, or destroy the confidential information utilizing an approved method of destroying confidential information: shredding, burning, or certified or witnessed destruction. Magnetic media are to be degaussed or returned to the other party. k. If the Pass-through Entity or Subrecipient enters into an agreement with a third party to provide WIOA services, the Pass-through Entity or Subrecipient agrees to include these data and security and confidentiality requirements in the agreement with that third party. In no event shall said information be disclosed to any individual outside of that third party's authorized staff, subcontractor(s), service providers, or employees. I. The Subrecipient may, in its operation of the America's Jab Center of California (AJCC), permit an AJCC Operator to enter into a subcontract to manage confidential information. This subcontract may allow an individual to register for resume distribution services at the same time the individual enrolls in CaIJOBS. Subrecipient shall ensure that all such subcontracts comply with the intellectual property requirements of this subgrant agreement, the confidentiality requirements of this subgrant agreement and any other terms of this subgrant agreement that may be applicable. In addition, the following requirements must be included in the subcontracts: 1. All client information submitted over the internet to the subcontractor's databases must be protected, at a minimum, by 128 -bit Secure Socket Layer (SSL) encryption. Clients' social security numbers must be stored in a separate database within the subcontractor's network of servers, and protected by a firewall and a secondary database server firewall or AES data encryption. If a subcontractor receives client social security numbers or other confidential information in the course of business, for example a resume -distribution service that provides enrollment in CaIJOBS, social security numbers must be destroyed within two days after the client registers for CaIJOBS. If a subcontractor obtains confidential information as an agent of the Subrecipient, the subcontract must specifically state the purpose for the data collection and the term of records retention must be stated, and directly related, to the purpose and use of the information. Social security numbers and other client specific information shall not be retained for more than three years after a client completes services. 2. Client information (personal information that identifies a client such as name and social security number) and/or demographic information of a client (such as wage history, address, and previous employment) shall not be used as a basis for commercial solicitation during the time the client or agency is using the subcontractor's services. Client information and/or demographic information shall not be used for any purposes other than those specific program purposes set forth in the subcontract. 3. An AJCC client must still be given the option to use the AJCC's services, including CaIJOBS, even if he or she chooses not to use any services of the subcontractor. This option shall be prominently, clearly and immediately communicated to the client upon registration within the AJCC or for CaIJOBS, the subcontractor's resume -distribution services, or any other services subcontractor offers to the client or the AJCC Operator. 4. The subcontractor must clearly disclose all of its potential and intended uses of the client's personal and/or demographic information for the services the client seeks and for any other services the subcontractor offers. The subcontractor shall not use a client's personal and/or demographic information without the client's prior permission. A link to the subcontractor's Privacy Policy shall appear prominently on the registration screens that list the potential and intended uses of the client's personal and/or demographic information. 5. When the Pass-through Entity modifies State automated systems such as the State CaIJOBS System, it shall provide reasonable notice of such changes to the Subrecipient. The Subrecipient shall be responsible to communicate such changes Page 15 of 16