6.5. ERMUSR 06-12-2007 - Laserfiche WebLink

Home Browse Search

Ells River GPfiunEcipal 1JUHUes Personal and/air Qred5Use & Security Policy Elk River Municipal Utilities (ERMU) collects social security numbers and has access to credit information in order to better position the organization to be able to collect unpaid debts. ERMU will request and use personal and/or credit information solely in connection with credit transactions involving the consumer as to whom such information is sought, or for other "permissible purposes" as defined by the Fair Credit Reporting Act, 15 U.S. C. Section 1681 et seq. ("FCRA") and to effect the collection of unpaid debts. 1. Effective Date The Plan's Credit Use Policy is effective XXX xx, xxxx. The Policy will remain in force until changed or rescinded by Management or Board Action. 2. Security Management Process Risk Analysis and Risk Management. Appropriate security measures are implemented to protect the confidentiality and integrity of this information described in this policy. Measures in place consist of limited dedicated user access to personal and/or credit information, employee signature acknowledging responsibility, computer passwords, locked cabinets, and locked facilities with limited access Employee Sanctions ERMU will apply appropriate employee sanctions to any employee ERMU who violates the Personal and/or Credit Use and Security Policy. Sanctions can include termination of employment when appropriate. 3. Security Official The Plan(s) will officially designate a Security Official and maintain written record of the designation. The current Security Official designation is the Finance Director. Responsibilities of The Plan(s) Security Official include: a. Periodically evaluate this policy and the procedures implemented to protect personal and/or credit information. The Security Official will maintain reasonable and appropriate policies and procedures to comply with the FCRA Standards and make appropriate changes when necessary. b. Regularly review the activity of any information systems involved in the maintenance or transmission of personal and/or credit information to determine if information has been used or disclosed in an inappropriate manner. 4. Workforce Security Employee authorization to access systems that obtains or transmits personal and/or credit information, including determination of appropriate employee clearance level, person authentication, and effective and timely termination of system access for employees who no Commission adopted