Laserfiche WebLink
ATTACHMENT H: DOL PRIVACY AND DATA SECURITY REQUIREMENTS <br />Department of Licensing Page 36 of 36 Contract No: K9319 <br /> <br />b. OFFSHORING – HARD COPY <br /> <br />Contractor must maintain all hard copies containing Personal Information only at locations in the <br />United States. <br /> <br />9. PERMISSIBLE USE REQUIREMENTS <br />a. PERMISSIBLE USE <br />Contractor may only use Personal Information for purposes strictly limited to Contractor’s <br />obligations under this Agreement to maintain and use such information to allow Applicants <br />to register and take the written and practical examination. Any other use of Personal <br />Information is strictly prohibited without the prior written consent of the individual. This <br />prohibition includes, without limitation, the use for unsolicited business contact, or other <br />commercial purposes unless specifically authorized by DOL in writing or otherwise as directed <br />by law. <br />The term “unsolicited business contact” means a contact that is intended to result in, or <br />promote, the sale of any goods or services to a person named in the disclosed information. <br />The term “commercial purposes” means using or intending to use information for the purpose <br />of facilitating a profit-expecting business activity. Any breach of this clause may result in <br />immediate termination of this Contract. <br />b. DATA USE AND TRAINING <br />Contractor must institute and maintain written policies to ensure Personal Information is only <br />collected and used as authorized herein. At a minimum, the policies must address training for <br />all personnel with access to Personal Information. Training must include: <br /> <br />1) Authorized use(s) of Personal Information as authorized in the Contract, <br />2) Limitations on the collection of Personal Information other than authorized in the Contract, <br />3) Penalties for violations of the Contract, and <br />4) Identifying and reporting an Incident or Data Breach of Personal Information. <br />Contractor may use the following training video to satisfy the above requirements if they do <br />not have their own equivalent in-house <br />training- https://www.youtube.com/watch?v=uylbgjsVsKs. <br />c. MONITORING PERSONNEL <br />Contractor must implement administrative, technical, or physical methods to monitor <br />personnel and Subcontractors for compliance with the authorized collection and use of <br />Personal Information in this Contract across all business practices. Methods must addr ess <br />monitoring collection, access to, and use of, Personal Information. <br />Docusign Envelope ID: 4798BD77-1E90-44A1-9098-432C0EDF7393