Loading...
HomeMy Public PortalAboutA-Check Global Equifax Verifications( v A -Check Global Scrooning Mado Smart - Completing the Equifax Verification Services Addendum (Required for all clients requesting employment verification services, redlines not accepted) A large percentage of U.S. Employers subscribe to Equifax Verification Services (EVS) commonly known as TALX or Work Number. To gain access to the EVS database, a Subscriber must be registered by A -Check. A -Check is subsequently audited by EVS to ensure we have an agreement for all A -Check Subscribers. Please complete the following steps: 1. Enter company name in Subscriber box at top of agreement. 2. Enter today's date in the form field provided in the first paragraph. 3. Execute the addendum on page 5. 4. Please provide the requested information in Exhibit A, page 6. (2) A -Check Global EVS Addendum - Screening Made Smart - Subscriber Name: Town of Gulf Stream This ADDENDUM TO A -Check's Master Services Agreement is made and entered into between Subscriber and A -Check America, Inc. dba A -Check Global ("A -Check") on: Day: Month: Year: 25 April 2017 Subscriber acknowledges that A -Check must access the EVS database to complete an employment verification when required by an employer and in order to access the database the end user of the information (Subscriber) must adhere to the requirements for accessing information contained in the EVS database. RECITALS: 1.0 Subscriber Obligations 1.1 Confidentiality: Any information services and data originating from EVS (the "EVS Employment Information") will be requested only for Subscriber's exclusive use and held in strict confidence except to the extent that disclosure to others is required or permitted by law. Only designated representatives of Subscriber will request EVS Employment Information on Subscriber's employees, and employees will be forbidden to obtain EVS Employment Information on themselves, associates or any other persons except in the exercise of their official duties. Subscriber will not disclose EVS Employment Information to the subject of the EVS Employment Information except as permitted or required by law, but will refer the subject to EVS. 1.2 Hold Harmless: Subscriber will hold EVS and all its agents harmless on account of any expense or damage arising or resulting from the publishing or other disclosure of EVS Employment Information by Subscriber, its employees or agents contrary to the conditions of Section 1 above or applicable law. 1.3 Not a Guarantor: Subscriber recognizes that EVS does not guarantee the accuracy or completeness of EVS Employment Information and Subscriber releases EVS and EVS's agents, employees, affiliated credit reporting agencies and independent contractors from any liability, including negligence, in connection with the provision of EVS Employment Information and from any loss or expense suffered by Subscriber resulting directly or indirectly from EVS Employment Information. Subscriber covenants not to sue or maintain any claim, cause of action, demand, cross -action, counterclaim, third -party action or other form of pleading against EVS, EVS's agents, employees, affiliated credit reporting agencies, or independent contractors arising out of or relating in any way to the accuracy, validity, or completeness of any EVS Employment Information. 1.4 Payment: Subscriber will be charged for the EVS Employment Information by CRA, which is responsible for paying EVS for the EVS Employment Information; provided, however, should the underlying relationship between Subscriber and CRA terminate at any time during the term of this Agreement, charges for the EVS Employment Information will be invoiced to Subscriber, and Subscriber will be solely responsible to pay EVS directly. 1.5 Fair Credit Reporting Act Certification: Subscriber certifies that it will order EVS Employment Information, which is a consumer report as defined by the federal Fair Credit Reporting Act, 15 U.S.C. 1681 et seq. ("FCRA"), only when Subscriber intends to use the EVS Employment Information: (a) in accordance with the FCRA and all state law counterparts; and for the following permissible purpose: for employment purposes; provided, however, that Subscriber certifies that, before ordering EVS Employment Information to be used in connection with P a g e 12 ACkadd002:02.2016 (D A -Check Global EVS Addendum - Screening Made Smart - employment purposes, it will clearly and conspicuously disclose to the Consumer, in a written document consisting solely of the disclosure, that Subscriber may obtain EVS Employment Information for employment purposes, and will also obtain the Consumer's written authorization to obtain or procure EVS Employment Information relating to that Consumer. Subscriber further certifies that it will not take adverse action against the Consumer based in whole or in part upon the EVS Employment Information without first providing to the Consumer to whom the EVS Employment Information relates a copy of the EVS Employment Information and a written description of the Consumer's rights as prescribed by the Consumer Financial Protection Bureau ("CFPB") under Section 609(c)(3) of the FCRA as referenced on Exhibit A-1 attached hereto, and also will not use any EVS Employment Information in violation of any applicable federal or state equal employment opportunity law or regulation. Subscriber will use EVS Employment Information ordered under this Agreement for the foregoing purpose and for no other purpose. Subscriber acknowledges that it has received from CRA a copy of the consumer rights summary as prescribed by the CFPB as referenced on Exhibit A-1. It is recognized and understood that the FCRA provides that anyone "who knowingly and willfully obtains information on a consumer from a consumer reporting agency under false pretenses shall be fined under Title 18, United States Code, imprisoned for not more than two (2) years, or both." EVS may periodically conduct audits of Subscriber regarding its compliance with the FCRA and other certifications in this Agreement. Audits will be conducted by email whenever possible and will require Subscribers to provide documentation as to permissible use of particular EVS Employment Information. In addition, CRA will be required to provide documentation indicating CRA validated the legitimacy of subscriber prior to contract execution and will also provide a copy of agreement between CRA and Subscriber. Subscriber gives its consent to EVS to conduct such audits and agrees that any failure to cooperate fully and promptly in the conduct of any audit, or Subscriber's material breach of this Agreement, constitute grounds for immediate suspension of the Service or termination of this Agreement. If EVS terminates this Agreement due to the conditions in the preceding sentence, Subscriber (i) unconditionally releases and agrees to hold EVS harmless and indemnify it from and against any and all liabilities of whatever kind or nature that may arise from or relate to such termination, and (ii) covenants it will not assert any claim or cause of action of any kind or nature against EVS in connection with such termination. Vermont Certification. Subscriber certifies that it will comply with applicable provisions under Vermont law. In particular, Subscriber certifies that it will order EVS Employment Information relating to Vermont residents that are consumer reports as defined by the Vermont Fair Credit Reporting Act ("VFCRA"), only after Subscriber has received prior Consumer consent in accordance with VFCRA Section 2480e and applicable Vermont Rules. Subscriber further certifies that a copy of Section 2480e of the Vermont Fair Credit Reporting Statute, attached hereto as Exhibit A, was received from CRA. 1.6 Data Security: This Section 6 applies to any means through which Subscriber orders or accesses EVS Employment Information including, without limitation, system -to -system, personal computer or the Internet. The term "Authorized User" means a Subscriber employee that Subscriber has authorized to order the EVS Employment Information and who is trained on Subscriber's obligations under this Agreement with respect to the ordering and use of the EVS Employment Information, including Subscriber's FCRA and other obligations with respect to the access and use of consumer reports. With respect to handling the EVS Employment Information, Subscriber agrees to: (a) ensure that only Authorized Users can order or have access to EVS Employment Information, (b) ensure that Authorized Users do not order EVS Employment Information for personal reasons or provide them to any third party except as permitted by this Agreement, Page 13 ACkadd002:02.2016 A -Check Global - Screening Made Smart- EVS Addendum (c) inform Authorized Users that unauthorized access to consumer reports may subject them to civil and criminal liability under the FCRA punishable by fines and imprisonment, (d) ensure that all devices used by Subscriber to order or access the EVS Employment Information are placed in a secure location and accessible only by Authorized Users and that such devices are secured when not in use through such means as screen locks, shutting power controls off, or other commercially reasonable security procedures, (e) take all necessary measures to prevent unauthorized ordering of EVS Employment Information by any persons other than Authorized Users for permissible purposes, including, without limitation, (a) limiting the knowledge of the Subscriber security codes, member numbers, User IDs, and any passwords Subscriber may use (collectively, "Security Information"), to those individuals with a need to know, (b) changing Subscriber's user passwords at least every ninety (90) days, or sooner if an Authorized User is no longer responsible for accessing the EVS Employment Information, or if Subscriber suspects an unauthorized person has learned the password, and (c) using all security features in the software and hardware Subscriber uses to order EVS Employment Information, (f) in no event access the EVS Employment Information via any hand-held wireless communication device, including but not limited to, web enabled cell phones, interactive wireless pagers, personal digital assistants (PDAs), mobile data terminals, and portable data terminals, (g) not use non -company owned assets such as personal computer hard drives or portable and/or removable data storage equipment or media (including but not limited to laptops, zip drives, tapes, disks, CDs, and DVDs) to store EVS Employment Information. (h) encrypt EVS Employment Information when it is not in use and with respect to all printed EVS Employment Information store in a secure, locked container when not in use and completely destroyed when no longer needed by cross -cut shredding machines (or other equally effective destruction method) such that the results are not readable or useable for any purpose, (i) if Subscriber sends, transfers or ships any EVS Employment Information, encrypt the EVS Employment Information using the following minimum standards, which standards may be modified from time to time by EVS: Advanced Encryption Standard (AES), minimum 128 -bit key or Triple Data Encryption Standard (3DES), minimum 168 -bit key encrypted algorithms, (j) monitor compliance with the obligations of this Section 6, and immediately notify EVS if Subscriber suspects or knows of any unauthorized access or attempt to access the EVS Employment Information, including, without limitation, a review of EVS invoices for the purpose of detecting any unauthorized activity, (k) not ship hardware or software between Subscriber's locations or to third parties without deleting all Security Information and any EVS Employment Information, (1) if Subscriber uses a Service Provider to establish access to EVS Employment Information, be responsible for the Service Provider's use of Security Information, and ensure the Service Provider safeguards Security Information through the use of security requirements that are no less stringent than those applicable to Subscriber under this Section 6, (m) use commercially reasonable efforts to assure data security when disposing of any consumer information or record obtained from the EVS Employment Information. Such efforts must include the use of those procedures issued by the federal regulatory agency charged with oversight of Subscriber's activities (e.g. the Consumer Financial Protection Page 14 ACkadd002:02.2016 A -Check Global EVS Addendum - Screening Made Smart - Bureau, the applicable banking or credit union regulator) applicable to the disposal of consumer report information or records. (n) use commercially reasonable efforts to secure EVS Employment Information when stored on servers, subject to the following requirements: (i) servers storing EVS Employment Information must be separated from the internet or other public networks by firewalls which are managed and configured to meet industry accepted best practices, (ii) protect EVS Employment Information through multiple layers of network security, including but not limited to, industry -recognized firewalls, routers, and intrusion detection/prevention devices (IDS/IPS), (iii) secure access (both physical and network) to systems storing EVS Employment Information, which must include authentication and passwords that are changed at least every ninety (90) days; and (iv) all servers must be kept current and patched on a timely basis with appropriate security specific system patches, as they are available, (o) not allow EVS Employment Information to be displayed via the internet unless utilizing, at a minimum, a three-tier architecture configured in accordance with industry best practices, and (p) use commercially reasonable efforts to establish procedures and logging mechanisms for systems and networks that will allow tracking and analysis in the event there is a compromise, and maintain an audit trail history for at least three (3) months for review by EVS. If EVS reasonably believes that Subscriber has violated this Section 6, EVS may, in addition to any other remedy authorized by this Agreement, with reasonable advance written notice to Subscriber and at EVS's sole expense, conduct, or have a third party conduct on its behalf, an audit of Subscriber's network security systems, facilities, practices and procedures to the extent EVS reasonably deems necessary, including an on-site inspection, to evaluate Subscriber's compliance with the data security requirements of this Section 6. 1.7 Subscriber certifies that it has been provided the "Notice to Users of Consumer Reports, Obligations of Users" which explains Subscriber's obligations under the FCRA as a user of consumer information as part of the Master Services Agreement with A -Check. 2.0 Signature Each party represents that it has caused this Addendum to be executed on its behalf as of the date written below by a representative empowered to bind that party with respect to the obligations in this Addendum. FOR SUBSCRIBER: Authori bscriber Representallye Signature: PrintName: Rita Taylor Title: Town Clerk Date: 04/25/2017 Dale: FOR A -CHECK GLOBAL: Signature: Page 15 ACkaddCO2:02.2016 (D A -Check Global - Screening Made Smart- EVS Addendum The undersigned, Town of Gulf Stream ("Subscriber), acknowledges that it subscribes to receive various information services from A -Check in accordance with the Vermont Fair Credit Reporting Statute, 9 V.S.A § 2480e (1999), as amended (the "VFCRA") and the federal Fair Credit Reporting Act, 15, U.S.C. 1681 et. seq., as amended (the "FCRA") and its other state law counterparts. In connection with Subscriber's continued use of A -Check information services in relation to Vermont consumers, Subscriber hereby certifies as follows: Vermont Certification: Subscriber certifies that it will comply with applicable provisions under Vermont law. In particular, Subscriber certifies that it will order information services relating to Vermont residents, that are credit reports as defined by the VFCRA, only after Subscriber has received prior consumer consent in accordance with VFCRA § 2480e and applicable Vermont Rules. Subscriber further certifies that the attached copy of VFCRA § 2480e applicable Vermont Rules were received from A -Check. Exhibit B. Please also include the following information Compliance Officer or Person Responsible for Consumer Reporting Compliance: Name: Rita Taylor Title: Town Clerk Mailing Address: 100 Sea Rd., Gulf Stream, FL 33483 Email Address: rtaylor n gulf-streanl.org Phone: 561-276-5116 Fax: 561-737-0188 P a u e 16 ACkadd002:02.2016 A -Check Global EVS Addendum - Screening Made Smart - Vermont Fair Credit Reporting Statute, 9 V.S.A. § 2480e (1999) § 2480e. Consumer consent (a) A person shall not obtain the credit report of a consumer unless: (1) the report is obtained in response to the order of a court having jurisdiction to issue such an order; or (2) the person has secured the consent of the consumer, and the report is used for the purpose consented to by the consumer. (b) Credit reporting agencies shall adopt reasonable procedures to assure maximum possible compliance with subsection (a) of this section. (c) Nothing in this section shall be construed to affect: (1) the ability of a person who has secured the consent of the consumer pursuant to subdivision (a)(2) of this section to include in his or her request to the consumer permission to also obtain credit reports, in connection with the same transaction or extension of credit, for the purpose of reviewing the account, increasing the credit line on the account, for the purpose of taking collection action on the account, or for other legitimate purposes associated with the account; and (2) the use of credit information for the purpose of preConsumer, as defined and permitted from time to time by the Federal Trade Commission. VERMONT RULES *** CURRENT THROUGH JUNE 1999 *** AGENCY 06. OFFICE OF THE ATTORNEY GENERAL SUB -AGENCY 031. CONSUMER PROTECTION DIVISION CHAPTER 012. Consumer Fraud --Fair Credit Reporting RULE CF 112 FAIR CREDIT REPORTING CVR 06-031-012, CF 112.03 (1999) CF 112.03 CONSUMER CONSENT (a) A person required to obtain consumer consent pursuant to 9 V.S.A. §§ 2480e and 2480g shall obtain said consent in writing if the consumer has made a written application or written request for credit, insurance, employment, housing or governmental benefit. If the consumer has applied for or requested credit, insurance, employment, housing or governmental benefit in a manner other than in writing, then the person required to obtain consumer consent pursuant to 9 V.S.A. §§ 2480e and 2480g shall obtain said consent in writing or in the same manner in which the consumer made the application or request. The terms of this rule apply whether the consumer or the person required to obtain consumer consent initiates the transaction. (b) Consumer consent required pursuant to 9 V.S.A. §§ 2480e and 2480g shall be deemed to have been obtained in writing if, after a clear and adequate written disclosure of the circumstances under which a credit report or credit reports may be obtained and the purposes for which the credit report or credit reports may be obtained, the consumer indicates his or her consent by providing his or her signature. (c) The fact that a clear and adequate written consent form is signed by the consumer after the consumer's credit report has been obtained pursuant to some other form of consent shall not affect the validity of the earlier consent. P a `_i 17 ACkadd002:02.2016