|
is restricted and shall maintain reasonable procedures to protect the Confidential Information from unauthorized internal and external
<br /> access. Only those employees or third parties,as defined in paragraph 6 above,who need such information to perform their job duties
<br /> shall have access to it. Client acknowledges it has specific retention and destruction practices outlined by the FCRA,the Federal Trade
<br /> Commission(in particular, 16 CFR Part 682)and the Drivers Privacy Protection Act,as well as other applicable Laws and Regulations.
<br /> Client will protect the privacy of consumer information that is contained in motor vehicle records,and access DMV records only with
<br /> written consent of the consumer. Client specifically acknowledges that pursuant to 16 CFR Part 682, it must properly dispose of
<br /> consumer information by taking reasonable measures to protect against unauthorized access to or use of the information in connection
<br /> with its disposal. Such reasonable measures may include,by example,and without limitation:
<br /> • implementing and monitoring compliance with policies and procedures that require the burning, pulverizing or
<br /> shredding of papers containing consumer information so that the information cannot practicably be read or
<br /> reconstructed
<br /> • implementing and monitoring compliance with policies and procedures that require the destruction or erasure of
<br /> electronic information so that the information cannot practicably be read or reconstructed
<br /> • after conducting due diligence,entering into and monitoring compliance with a contract with a document destruction
<br /> company to dispose of material, specifically identified as consumer information, in a manner consistent with the
<br /> requirements of 16 CFR Part 682
<br /> • conducting regular employee training on the company's policies and procedures for proper disposal of consumer
<br /> information
<br /> • destroying or making inaccessible any paper documents containing consumer information that are at individual desks
<br /> or workstations no later than the end of each work day.
<br /> If Client experiences a breach of security regarding personal identifying information on the subjects of the reports it receives, Client
<br /> shall notify DataQuest within twenty-four(24)hours of discovery of the breach. Within seven(7)business days of such an event,Client
<br /> shall advise DataQuest what steps have been taken to protect the information from the reoccurrence of the breach and what additional
<br /> measures have been taken to restore protection of the information.
<br /> 11. Independent Legal Counsel;Use of Sample Templates and Forms. DataQuest is not an employment law firm or a human
<br /> resource firm. DataQuest is not legal counsel and cannot provide legal advice. Client should work with legal counsel to develop an
<br /> employment screening program specific to its needs. It is recommended that Client engages with legal counsel to ensure that Client's
<br /> policies and procedures related to procurement of consumer reports and the use of CRA-provided information are in compliance with
<br /> applicable Laws and Regulations. DataQuest may provide Client with sample written or online forms, templates,authorizations and
<br /> disclosures,notices and other documents for Client's use, including without limitation,sample consumer disclosure and authorization
<br /> forms,a sample pre-adverse action letter template,a sample adverse action letter template,and federal and local notices (collectively,
<br /> "Sample Documents"), which may be updated from time to time. Client may review the current version of the Sample Documents by
<br /> accessing them in DataQuest's document library (available under the "Help" tab once Client logs in to DataQuest's system or by
<br /> contacting DataQuest directly). In using the Sample Documents,it is Client's independent obligation to ensure that the Sample
<br /> Documents comply with applicable Laws and Regulations. DataQuest does not guarantee that any of the Sample Documents
<br /> comply with applicable Laws and Regulations.DataQuest recommends that Client consult with its own legal counsel to ensure
<br /> Client's compliance with all applicable Laws and Regulations related to the procurement and use of consumer reports.
<br /> DataQuest shall not be liable for,and Client waives all claims whatsoever against DataQuest for,damages,liabilities,losses,
<br /> costs,fines,penalties or expenses resulting from Client's election to use Sample Documents and/or for Client's failure to comply
<br /> with Client's obligations under applicable Laws and Regulations.
<br /> 12. Information Disclosed by Client and Client's Authorized Users. The consumer reports shall he requested and disclosed by
<br /> Client only to Client's designated and authorized employees or third parties to the extent permitted by applicable Laws and Regulations
<br /> and as defined in paragraph 6 above,having a need to know or joint use with employers to which Client proposes to assign one of its
<br /> employees, and only to the extent necessary to enable Client to use the consumer reports in accordance with this Agreement and in
<br /> compliance with applicable Laws and Regulations. Client shall ensure that such designated and authorized employees do not obtain
<br /> any Consumer Reports on themselves,associates,or any other person except in the exercise of their official duties. Client is responsible
<br /> for ensuring that any owner,employee,independent contractor or other agent of the Client("User")who accesses DataQuest's system
<br /> or who uses DataQuest's reports,forms,templates or other documents complies with the provisions of this Agreement and is aware of
<br /> the requirements set forth herein and in the Laws and Regulations.
<br /> 13. Data Ownership and Data Availability. Any data entered into or generated by DataQuest's system or in a consumer file,
<br /> including,without limitation,any consumer reports or consumer information(but excluding any disclosures or authorizations generated
<br /> by DataQuest on behalf of Client referred to in Section 4 above in connection with Client's use of an integrated system or with QuickApp
<br /> or QuickApp Pro) are DataQuest's sole property. DataQuest will deliver consumer reports to Client in a format that can be viewed,
<br /> printed or saved by Client for a one-time use by Client. Data destruction policies may be imposed on DataQuest by its software platform
<br /> vendors,other vendors or agencies,and such policies may be changed by DataQuest's vendors from time to time.
<br /> DataQuest CSA_Rev•20180524-2(CAS 1655106.DOCX;2/11336.020002/) Page 3 of 14
<br />
|