Page 33

on the test. • DCAS/ACEDS personnel/users will have the opportunity to make up the training, if they miss the scheduled training, or fail the test at the conclusion of the training, within 15 days from the initial training offer date. • This training will be offered every year, and a review of the training materials and information will be conducted annually to determine if changes to materials and information presented are warranted. • An evaluation of the training will be done by each DCAS/ACEDS user to determine the need for additional training and/or other desired training needs each year. • An outline of the initial training will consist of the following components: o Purpose, o Introduction, o Objectives, o IRS information, o SSA and NDNH information, o IRS, SSA, and NDNH roles, o ESA responsibility for confidentiality, o Exception to print IRS screen, o Penalty for unauthorized disclosure, o Need to know disclosure, and o Summary. Coordination and compliance amongst organizational entities: DPDT on behalf of DCAS/ACEDS will coordinate Safeguarding Awareness Training Classes for appropriate agencies, facilities, clinics, contractors, and/or outreach centers that have access to privileged and vital customer information. Non-disclosure and Authorized Official Usage: DCAS/ACEDS personnel/users must not disclose, or cause to be disclosed, verbally or in writing, and/ or engage in unauthorized use or disclosure of privileged government/customer information pursuant to regulations under the Internal Revenue Service (IRS), Personally Identifiable Information (PII), and/or Health Information Portability and Accountability Act (HIPAA), but not limited to these regulations. DCAS/ACEDS personnel/users must protect personal information of customers by safeguarding the information, and not leaving documentation unsecured in their workstation for anyone to see, obtain, or take from the work area. DCAS/ACEDS personnel/users must only share sensitive information with those who need it to perform their duties in conducting official business pertaining to the determination of eligibility for public benefits in the District of Columbia. (Note: DCAS/ACEDS will be monitored and tracked on a regular basis to ensure appropriate usage of the system, i.e., authorized, official case review/action). For Example: Molly & Sue are friends. Molly is a DCAS personnel/user. Sue calls Molly and asks her to verify or look up information regarding her estranged husband’s income status. Molly, willing to help her friend, Sue, looks up the husband’s information since she has access to it at her center. By following through on Sue’s request, Molly is engaging in unauthorized and unofficial case review/action. Thus, Molly can be subjected to penalties, including loss of wages, loss of job, imposed fines, and she can be held personally liable in a civil action for her unauthorized use and disclosure of privileged information. Non-reproduction Requirements: Additionally, DCAS/ACEDS Data where identified in the system(s) must remain strictly confidential, and must not be printed as a hard copy under any circumstances. The specific screen will say “Do not print”. Handling of Federal Tax Information (“FTI”): DCAS/ACEDS personnel/users must not include or cause