245C.32 SYSTEMS AND RECORDS. Subdivision 1. Establishment. The commissioner may establish systems and records to fulfill the requirements of this chapter. Subd. 1a. NETStudy 2.0 system. (a) The commissioner shall design, develop, and test the NETStudy 2.0 system and implement it no later than September 1, 2015. (b) The NETStudy 2.0 system developed and implemented by the commissioner shall incorporate and meet all applicable data security standards and policies required by the Federal Bureau of Investigation (FBI), Department of Public Safety, Bureau of Criminal Apprehension, and the Office of MN.IT Services. The system shall meet all required standards for encryption of data at the database level as well as encryption of data that travels electronically among agencies initiating background studies, the commissioner’s authorized fingerprint collection vendor, the commissioner, the Bureau of Criminal Apprehension, and in cases involving national criminal record checks, the FBI. (c) The data system developed and implemented by the commissioner shall incorporate a system of data security that allows the commissioner to control access to the data field level by the commissioner’s employees. The commissioner shall establish that employees have access to the minimum amount of private data on any individual as is necessary to perform their duties under this chapter. (d) The commissioner shall oversee regular quality and compliance audits of the authorized fingerprint collection vendor. Subd. 1b. Civil remedies. When accessing private data on individuals through NETStudy 2.0, entities that are authorized to initiate background studies and the commissioner’s authorized fingerprint collection vendors shall be subject to all responsibilities and civil remedies applicable to a responsible authority or government entity as specified under section 13.08. Subd. 2. Use. (a) The commissioner may also use these systems and records to obtain and provide criminal history data from the Bureau of Criminal Apprehension, criminal history data held by the commissioner, and data about substantiated maltreatment under section 626.556 or 626.557, for other purposes, provided that: (1) the background study is specifically authorized in statute; or (2) the request is made with the informed consent of the subject of the study as provided in section 13.05, subdivision 4. (b) An individual making a request under paragraph (a), clause (2), must agree in writing not to disclose the data to any other individual without the consent of the subject of the data. (c) The commissioner may recover the cost of obtaining and providing background study data by charging the individual or entity requesting the study a fee of no more than $20 per study. The fees collected under this paragraph are appropriated to the commissioner for the purpose of conducting background studies. (d) The commissioner shall recover the cost of obtaining background study data required under section 524.5-118 through a fee of $50 per study for an individual
275
Made with FlippingBook - Online Brochure Maker