SHREDDING CONSUMER REPORTS

 

It is the policy of Mitchell Public Schools to take reasonable measures to protect against unauthorized access to consumer information from consumer reports. A consumer report includes criminal background checks performed on applicants or employees by a third party. It does not include criminal checks performed by school staff.

 

The term "consumer report" means any written, oral, or other communication of any information by a consumer reporting agency bearing on a consumer's credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living which is used or expected to be used or collected in whole or in part for the purpose of serving as a factor in establishing the consumer's eligibility for employment purposes.

 

Reasonable measures to protect against unauthorized access to or use of consumer information in connection with its disposal include the following examples. These examples are illustrative only and are not exclusive or exhaustive methods for complying with this directive.

 

1.      Shredding of papers containing consumer information so that the information cannot practicably be read or reconstructed. Burning or pulverising such papers are also options where appropriate.

2.      Destruction or erasure of electronic media containing consumer information so that the information cannot practicably be read or reconstructed.

3.      After due diligence, entering into and monitoring compliance with a contract with another party engaged in the business of record destruction to dispose of material in a manner consistent with this directive. In this context, due diligence could include reviewing an independent audit of the disposal company's operations and/or its compliance with this rule, obtaining information about the disposal company from several references or other reliable sources, requiring that the disposal company be certified by a recognized trade association or similar third party, reviewing and evaluating the disposal company's information security policies or procedures, or taking other appropriate measures to determine the competency and integrity of the potential disposal company.

 

This policy does not require that the consumer reports information be disposed of; rather, it specifies the action to be taken whenever such disposal occurs. Questions regarding the disposal of consumer reports information should be directed to the superintendent or the superintendent's designee.

 

Legal Reference: FTC Rule on Disposal of Consumer Report Information

and Records, 16 CFR Part 682

Fair Credit Reporting Act, 15 U.S.C. 1681a(3)

 

Approved _____________ Reviewed ______________ Revised _______________