CDR hereby confirms our policy protect and maintain the privacy of personal data that we collect and assemble on behalf of employers in connection with a background screening.  We provide extremely sensitive and personal information about individuals. This information may include, but is not limited to, full name, previous names used, Social Security Number, date of birth, phone numbers, residential address, credit information, employment history, academic history, and criminal record history. We provide employment screening services only to businesses with a permissible purpose. We release information via telephone, fax, mail and electronically, only to the individual(s) or business(s) that originally requested the service. Under no circumstances will the personal information collected and maintained in our databases ever be sold or provided to an outside entity for any purpose. CDR. does not use our databases of applicant information to compile mailing lists for sales or any other purpose.

Safe Harbor Provisions

We certify that we comply with the " Safe Harbor" principles of the United States Department of Commerce, in relation to personal data collected in the European Union (EU). We endorse and follow the seven principles and practices outlined by the European Commission's Directive on Data Protection. EBS, Inc. fulfills our obligations under the seven principals in the following manner:

Notice

CDR always disclosed to the consumer (as prescribed by the Fair Credit Reporting Act, hereinafter "FCRA") that the information they provided will be used to conduct employment screening for the employer desiring to use it for employment related decisions (to determine eligibility to hire, retain, promote, or reassign). CDR provides contact information, which is included on the authorization and disclosure form in the event the consumer has any inquiries or complaints. Employers may also use this information to conduct employee investigations where an employer has a suspicion of work related misconduct or wrongdoing. Personal information gathered may include your history of employment and other credentials related to your prospective employment CDR. will use such information only for the purposes of performing employment screening and credential verification services, including to verify the accuracy of the personal information and to check on references. In addition to the data that is submitted to CDR. by our clients, CDR. may collect data from third parties as needed to process academic, residential, achievement, job performance, attendance, litigation, personal history, credit reports, driving records, criminal history records and other lawful checks. A Background Investigation Report may be prepared summarizing this information. Prior employers and/or references may be contacted, and the report may include information obtained through personal interviews regarding the applicant’s character, general reputation, personal characteristics and/or mode of living. We may provide all such information to our client in one or more reports. CDR. may also collect email correspondence from visitors to this site who send email to CDR.

Choice (opt-out)

CDR. gives consumers a choice for the collection of information, if you do not wish to have your personal data made available to our client, please do not authorize our client to procure a Background Investigation Report. By consenting to the procurement of a Background Investigation Report, and submitting information to our client, you are agreeing to allow CDR to disclose information about you to our client and to sharing information with our subcontractors.

The information collected is only utilized for the purposes described above in the section on "Notice."  In the event a consumer wishes to opt-out of any information collected by CDR. a consumer can withdraw his/her consent by notifying CDR through Email, Phone, Fax or through the contact information provided on the authorization and disclosure form. This does not, however, mean that information will automatically be erased or deleted because various laws require CDRto maintain the data on file for a certain period of time.  However, in the event of an opt-out, the data will not be forwarded or utilized by CDR for any purpose.

Onward Transfer

In connection with our providing services and in some cases we may employ other companies and individuals as our subcontractors to perform functions on our behalf. CDR takes reasonable steps to ensure that any party that receives information will maintain and protect the privacy and confidentiality of the information. Any third party that receives information from CDR obtained written authorization from the consumer and has disclosed to the consumer the purpose of collecting this data.  In addition, each client certifies they will comply with the confidentiality clause in our service agreement, and as described in this Privacy Policy, or required by law, we will not use or otherwise disclose any of the personally identifying information that you provide or that we collect from third parties or other sources.

Access

CDR provides access to all data collected about the consumer. A consumer may request in writing, access to all data collected and maintained about him or her. CDR affords the consumer to a reasonable opportunity to correct, amend, or delete information that is inaccurate or incomplete as outlined under the FCRA. Under all circumstances, a consumer is entitled to a copy of his/her report, including a consumer who is a citizen of the EU.  However, CDR. reserves the right to engage in reasonable efforts to confirm the identity of anyone requesting this data, to include a copy of photo ID, full name, data of birth, and social security number.

Security

CDR takes extreme measures to protect all personal and identifiable information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. All information transmitted to or from is delivered in HTML or PDF format and encrypted using 128-bit SSL. Moreover, only employees who need the access to this information in order perform a specific job are granted access to personally identifiable information. All employees are kept up-to-date on our security and privacy policies. Finally, the servers that are used to store personally identifiable information are kept in a secure environment, with appropriate security measures, including the application/web server which is connected to the Internet through double firewalls that only allows incoming https traffic.

Data Integrity

CDR only collects data that is necessary for the purposes listed under the section on "Notice."  This data includes information that is necessary to identify the consumer for purposes of background screening and/or related information.  In accordance with the FCRA, CDR makes every reasonable effort to assure accuracy of the information collected on the consumer.

Enforcement

CDR. adheres to the EU Safe Harbor Policy by which in-house verification and resolution will be managed by our compliance team.   In addition, we provide an independent recourse mechanism by which complaints and disputes are investigated and resolved.  All complaints and disputes that cannot be resolved by CDR and in fairness to the consumer will be forwarded to the European Data Protection Authorities to handle the dispute resolution process. Moreover, CDR is governed by FCRA regulations as enforced by the U.S. Federal Trade Commission.

Criminal Data Report, Inc.is a member of the (NAPBS) National Association of Professional Background Screeners and strictly adheres to its professional standards, code of conduct, ethical business practices, and its promotion of compliance with the Fair Credit Reporting Act.