Policy Implementation

1. Consent

An individual’s Biometric Data will not be collected or otherwise obtained by Maryville without prior written consent of the individual. The consent form will inform the individual of the reason the Biometric Information is being collected and the length of time the data will be stored.

2. Disclosure

Maryville will not disclose or disseminate any Biometric Data to anyone other than its Biometric Identifier collector vendor(s) and/or licensor(s), unless:

a. disclosure is required by state or federal law or municipal ordinance; or, other identifier;

b. disclosure is required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction; 

c. the disclosed data completes a financial transaction requested or authorized by the employee; or

d. the employee has consented to such disclosure or dissemination.

3. Storage

Maryville will: 

(1) store, transmit, and protect from disclosure all biometric identifiers and biometric information using the reasonable standard of care within the industry; and

(2) store, transmit, and protect from disclosure all biometric identifiers and biometric information in a manner that is the same as or more protective than the manner in which Maryville stores, transmits, and protects other confidential and sensitive information. 

(Source:  P.A. 95-994, eff. 10-3-08)

4. Retention Schedule

In circumstances where Maryville retains Biometric Information, Maryville will permanently destroy an individual’s Biometric Data within six (6) months of when the initial purpose for collecting or obtaining such Biometric Data has been satisfied, such as:

a. the employee’s employment is terminated;

b. the contractors, consultants and temporary employees and volunteers or otherwise is no longer engaged with Maryville;

c. the employee transfers to a position for which the Biometric Data is not used; or

d. Maryville no longer uses the Biometric Information. 

Maryville will not collect, capture, purchase, receive through trade or otherwise obtain a person’s biometric identifier or biometric information, unless it first: 

1. informs the subject or the subject’s legally authorized representative in writing that a biometric identifier or biometric information is being collected or stored;
2. informs the subject or the subject’s legally authorized representative in writing of the specific purpose and length of term for which a biometric identifier or biometric information is being collected, stored, and used; and
3. receives a written release executed by the subject of the biometric identifier or biometric information or the subject’s legally authorized representative. 

Maryville will not disclose, redisclose, or disseminate a person’s biometric identifier or biometric information unless: 

1. the subject of the biometric identifier or biometric information or the subject’s legally authorized representative consents to the disclosure or redisclosure;
2. the disclosure or redisclosure completes a financial transaction requested or authorized by the subject of the biometric identifier or the biometric information or the subject’s legally authorized representative;
3. the disclosure or redisclosure is required by State or federal law or municipal ordinance; or
4. the disclosure is required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction.