Common use of Privacy and Security Clause in Contracts

Privacy and Security. A. User shall use criminal history record information acquired hereunder only to screen User’s Idaho current and/or prospective employees and/or volunteers, and only for purpose(s) of employment and/or determination of suitability for access to children, elderly, or disabled persons, pursuant to the terms of the NCPA of 1993. If User is a governmental agency, such records may additionally be used in administrative hearings associated with one of the enumerated purposes; B. User shall not commingle criminal history records with other records, whether such other records are public or not; C. User shall not duplicate and/or disseminate criminal history records acquired hereunder for use outside of User entity except as authorized by state and federal law. D. User has been approved to receive criminal history record information pursuant to specific statutory authority and shall not use criminal history record information acquired pursuant to such approval for any other purpose; E. User shall not use or rely upon a criminal history record or information which is or is likely to be out-of-date and, in any event, if criminal activity is pertinent to and considered at the time of an employee or volunteer’s service, a current computerized criminal history must be requested and relied upon; F. User may destroy criminal history records when they are no longer needed. The original Waiver Agreement and Statement form must be retained by User for as long as the employee or volunteer is working for User, or for five years, whichever is longer. Destruction must be accomplished in a way so that the information cannot be retrieved; for example, the records may be shredded; G. User shall keep criminal history records acquired hereunder in a secure file, safe, or other security device, such as locked file cabinet in an access-controlled area, and shall take such further steps as are necessary to ensure that the records are accessible only to those of its employees who have been trained in their proper use and handling and have a need to examine such records; and H. If Entity Is Subject To The Public Records Act** - If User is subject to the Public Records Act, Idaho Title 9, Chapter 3, User shall, upon receipt of any request, pursuant to the public records law, for a processed fingerprint card or criminal history record, transmit the request, along with the involved fingerprint card and criminal history record, to the ISP, ATTN: Operations Officer. ISP will prepare copies of the involved documents, obliterating any state or federal data, which is not available for dissemination under the Idaho public records law, and return all documents to the User for response to the requester. However, a processed card, or photocopy of same, may be provided to a law enforcement agency for fingerprint identification purposes, if so requested. User shall not release any criminal history information that is made exempt from public records disclosure by law. In particular, record information derived from the U.S. Department of Justice shall not be disseminated outside the User entity or used for a purpose other than that specified in the statute authorizing the request.

Privacy and Security. A. User QE shall use criminal history record information acquired hereunder only to screen Userthe QE’s Idaho Missouri current and/or prospective applicant, employees and/or volunteers, and only for purpose(s) of employment and/or determination of suitability for access to children, elderly, or disabled persons, persons pursuant to the terms of the NCPA of 1993NCPA/VCA. If User QE is a governmental agency, such records may additionally be used in administrative hearings associated with one of the enumerated purposes; B. User QE shall not commingle criminal history records with other records, whether such other records are public or not; C. User QE shall not duplicate and/or disseminate criminal history records record information (CHRI) acquired hereunder for use outside of User entity except as authorized by state the QE with the exception of the prospective applicant, employee and/or volunteer and federal lawa dissemination log must be maintained at the time of dissemination. D. User ▇. ▇▇ has been approved to receive criminal history record information pursuant to specific statutory authority and shall not use criminal history record information acquired pursuant to such approval for any other purpose; E. User QE shall not use or rely upon a criminal history record or information which is or is likely to be out-of-date and, in any event, if criminal activity is pertinent to and considered at the time of an applicant, employee or volunteer’s service, a current computerized criminal history must be requested and relied upon; F. User ▇. ▇▇ may destroy criminal history records when they are and dissemination log after one (1) year post audit and/or after employee or volunteer is no longer neededworking for QE, whichever is longer. The QE must retain the original Waiver Agreement and Statement form must be retained by User for as long as the employee or volunteer is working for UserQE, or for five yearsone (1) year post audit, whichever is longer. Destruction must be accomplished in a way so that the information cannot be retrieved; for example, the records may be shredded;. G. User QE shall keep criminal history records acquired hereunder in a secure file, safe, or other security device, such as locked file cabinet in an access-access- controlled area, and shall take such further steps as are necessary to ensure insure that the records are accessible only to those of its employees who have been trained in their proper use and handling and have a need to examine such records; and H. If Entity Is Subject To The Public Records Act** - If User is subject to the Public Records Act, Idaho Title 9, Chapter 3, User shall, upon receipt of any request, pursuant to the public records law, for a processed fingerprint card or criminal history record, transmit the request, along with the involved fingerprint card and criminal history record, to the ISP, ATTN: Operations Officer. ISP will prepare copies of the involved documents, obliterating any state or federal data, which is not available for dissemination under the Idaho public records law, and return all documents to the User for response to the requester. However, a processed card, or photocopy of same, may be provided to a law enforcement agency for fingerprint identification purposes, if so requested. User QE shall not release disseminate any information associated with a request for criminal history information that is made exempt from public records disclosure by lawrecords. In particular, Any request for criminal record information derived from received by the U.S. Department QE will be referred to and processed through the Custodian of Justice shall not be disseminated outside Records at the User entity or used for a purpose other than that specified in the statute authorizing the requestMissouri State Highway Patrol.

Privacy and Security. A. User QE shall use criminal history record information acquired hereunder only to screen Userthe QE’s Idaho Missouri current and/or prospective employees and/or volunteers, and only for purpose(s) of employment and/or determination of suitability for access to children, elderly, or disabled persons, persons pursuant to the terms of the NCPA of 1993NCPA/VCA. If User QE is a governmental agency, such records may additionally be used in administrative hearings associated with one of the enumerated purposes; B. User QE shall not commingle criminal history records with other records, whether such other records are public or not; C. User QE shall not duplicate and/or disseminate criminal history records record information (CHRI) acquired hereunder for use outside of User entity except as authorized by state the QE with the exception of the prospective employee and/or volunteer and federal lawa dissemination log must be maintained at the time of dissemination. D. User ▇. ▇▇ has been approved to receive criminal history record information pursuant to specific statutory authority and shall not use criminal history record information acquired pursuant to such approval for any other purpose; E. User QE shall not use or rely upon a criminal history record or information which is or is likely to be out-of-date and, in any event, if criminal activity is pertinent to and considered at the time of an employee or volunteer’s service, a current computerized criminal history must be requested and relied upon; F. User ▇. ▇▇ may destroy criminal history records when they are and dissemination log after one (1) year post audit and/or after employee or volunteer is no longer neededworking for QE, whichever is longer. The QE must retain the original Waiver Agreement and Statement form must be retained by User for as long as the employee or volunteer is working for UserQE, or for five yearsone (1) year post audit, whichever is longer. Destruction must be accomplished in a way so that the information cannot be retrieved; for example, the records may be shredded;. G. User QE shall keep criminal history records acquired hereunder in a secure file, safe, or other security device, such as locked file cabinet in an access-access- controlled area, and shall take such further steps as are necessary to ensure insure that the records are accessible only to those of its employees who have been trained in their proper use and handling and have a need to examine such records; and H. If Entity Is Subject To The Public Records Act** - If User is subject to the Public Records Act, Idaho Title 9, Chapter 3, User shall, upon receipt of any request, pursuant to the public records law, for a processed fingerprint card or criminal history record, transmit the request, along with the involved fingerprint card and criminal history record, to the ISP, ATTN: Operations Officer. ISP will prepare copies of the involved documents, obliterating any state or federal data, which is not available for dissemination under the Idaho public records law, and return all documents to the User for response to the requester. However, a processed card, or photocopy of same, may be provided to a law enforcement agency for fingerprint identification purposes, if so requested. User QE shall not release disseminate any information associated with a request for criminal history information that is made exempt from public records disclosure by lawrecords. In particular, Any request for criminal record information derived from received by the U.S. Department QE will be referred to and processed through the Custodian of Justice shall not be disseminated outside Records at the User entity or used for a purpose other than that specified in the statute authorizing the requestMissouri State Highway Patrol.

Privacy and Security. A. User shall use criminal history record information acquired hereunder only to screen User’s Idaho Florida current and/or prospective employees and/or volunteers, and only for purpose(s) of employment and/or determination of suitability for access to children, elderly, or disabled persons, pursuant to the terms of the NCPA of 1993. , as amended, and section 943.0542, F.S. If User is a governmental agency, such records may additionally be used in administrative hearings associated with one of the enumerated purposes; B. User shall not commingle criminal history records with other records, whether such other records are public or not; C. User shall not duplicate and/or disseminate criminal history records acquired hereunder for use outside of User entity except as authorized by state and federal law.. Sharing of criminal history records with other qualified entities is permitted by the FBI provided that: 1. Such other entity is authorized to receive criminal history record information derived from the systems of the U.S. Department of Justice in the manner specified herein and User has verified the other entity’s qualifying status as required herein; and 2. User properly listed “NCPA/VCA VOLUNTEER” or “NCPA/VCA EMPLOYEE”, in the “reason fingerprinted” block of the fingerprint card User submitted to FDLE for the applicable current or prospective employee or volunteer. (VCA represents Volunteers for Children Act); D. User has been approved to receive criminal history record information pursuant to specific statutory authority and shall not use criminal history record information acquired pursuant to such approval for any other purpose; E. User shall not use or rely upon a criminal history record or information which is or is likely to be out-of-date and, in any event, if criminal activity is pertinent to and considered at the time of an employee or volunteer’s service, a current computerized criminal history must be requested and relied upon; F. User may destroy criminal history records when they are no longer needed. The original Waiver Agreement and Statement form must be retained by User for as long as the employee or volunteer is working for User, or for five years, whichever is longer. Destruction must be accomplished in a way so that the information cannot be retrieved; for example, the records may be shredded; G. User shall keep criminal history records acquired hereunder in a secure file, safe, or other security device, such as locked file cabinet in an access-controlled area, and shall take such further steps as are necessary to ensure insure that the records are accessible only to those of its employees who have been trained in their proper use and handling and have a need to examine such records; and H. If Entity Is Subject To The Public Records ActIF ENTITY IS SUBJECT TO THE PUBLIC RECORDS ACT** - If User is subject to the Public Records Act, Idaho Title 9chapter 119, Chapter 3F.S., User shall, upon receipt of any request, pursuant to the public records law, for a processed fingerprint card or criminal history record, transmit the request, along with the involved fingerprint card and criminal history record, to the ISPFlorida Department of Law Enforcement, ATTNAttention: Operations OfficerUser Services Bureau. ISP FDLE will prepare copies of the involved documents, obliterating any state or federal data, data which is not available for dissemination under the Idaho Florida public records law, and return all documents to the User for response to the requester. However, a processed card, or photocopy of same, may be provided to a law enforcement agency for fingerprint identification purposes, if so requested. User shall not release any criminal history information that is made exempt from public records disclosure by law. In particular, record information derived from the U.S. Department of Justice shall not be disseminated outside the User entity or used for a purpose other than that specified in the statute authorizing the request., section 943.0542, F.S.

Privacy and Security. A. User Qualified Entity shall use criminal history record information acquired hereunder only to screen UserQualified Entity’s Idaho current and/or prospective employees and/or volunteers, and only for purpose(s) of employment and/or determination of suitability for access to children, elderly, or disabled persons, pursuant to the terms of the NCPA of 1993. If User Qualified Entity is a governmental agency, such records may additionally be used in administrative hearings associated with one of the enumerated purposes; B. User Qualified Entity shall not commingle criminal history records with other records, whether such other records are public or not; C. User Qualified Entity shall not duplicate and/or disseminate criminal history records acquired hereunder for use outside of User entity Qualified Entity except as authorized by state and federal law. D. User Qualified Entity has been approved to receive criminal history record information pursuant to specific statutory authority and shall not use criminal history record information acquired pursuant to such approval for any other purpose; E. User Qualified Entity shall not use or rely upon a criminal history record or information which is or is likely to be out-out- of-date and, in any event, if criminal activity is pertinent to and considered at the time of an employee or volunteer’s service, a current computerized criminal history must be requested and relied upon; F. User Qualified Entity may destroy criminal history records when they are no longer needed. The original Waiver Agreement and Statement form must be retained by User Qualified Entity for as long as the employee or volunteer is working for UserQualified Entity, or for five years, whichever is longer. Destruction must be accomplished in a way so that the information cannot be retrieved; for example, the records may be shredded; G. User Qualified Entity shall keep criminal history records acquired hereunder in a secure file, safe, or other security device, such as locked file cabinet in an access-controlled area, and shall take such further steps as are necessary to ensure that the records are accessible only to those of its employees who have been trained in their proper use and handling and have a need to examine such records; and H. If Entity Is Subject To The Public Records Act** - If User Qualified Entity is subject to the Public Records Act, Idaho Title 9, Chapter 3, User Qualified Entity shall, upon receipt of any request, pursuant to the public records law, for a processed fingerprint card or criminal history record, transmit the request, along with the involved fingerprint card and criminal history record, to the ISP, ATTN: Operations Officer. ISP will prepare copies of the involved documents, obliterating any state or federal data, which is not available for dissemination under the Idaho public records law, and return all documents to the User Qualified Entity for response to the requester. However, a processed card, or photocopy of same, may be provided to a law enforcement agency for fingerprint identification purposes, if so requested. User Qualified Entity shall not release any criminal history information that is made exempt from public records disclosure by law. In particular, record information derived from the U.S. Department of Justice shall not be disseminated outside the User entity Qualified Entity or used for a purpose other than that specified in the statute authorizing the request.