Massachusetts CORI Updated Regulations
May 25th, 2017 | Sterling
In May of 2012, Massachusetts DCJIS issued updated regulations on how employers and consumer reporting agencies could access CORI records. The DCJIS recently amended these regulations. Please find below a summary of the changes.
CORI Acknowledgement forms
- Cori forms can be collected electronically
- Employers must verify the identity of individuals by reviewing a photo id. If the person does not have a photo id the employer can review a birth certificate or social security card. If this is not possible to do in person the individual can submit a notarized Acknowledgement form.
- Cori forms continue to be valid for one year, but the requirement to provide notice of another request during this time period has been removed.
- In addition to destroying all CORI reports, employers now must destroy all CORI acknowledgement forms. (Seven years from the date of employment or volunteer service, or from the date of the final employment, volunteer, or licensing decision of the requestor regarding the subject, whichever occurs later.
Employees
- The regulations take a broader definition of an employment applicant. This definition now includes volunteers, subcontractors, contractors or vendor applicants and individuals applying for a special state, municipal, or county employee positions.
- An employer cannot utilize criminal information before the individual turned 18 unless they were tried as an adult.
ICORI Agency Agreement
- Employers must enter into an ICORI Agency Agreement and the agreement must include the following:
- The employer will comply with the CORI laws and regulations
- It will maintain an up to date “need to Know” list of staff that is authorized to request, receive or review CORI information
- It will request the level of CORI access authorized under the statute or by DCJIS
- The employer and users of the account will be liable for any violation of the CORI law or regulations
Utilizing a Consumer Reporting Agency
- Consumer reporting agencies are still prohibited from retaining the results unless the employer has authorized them as a decision maker
- Employers utilizing a consumer reporting Agency must provide a statement to the CRA indicating whether the annual salary will be over $,000.00
Storing CORI in the Cloud
- The new regulations permit cloud storage.
- The employer must have a written agreement with the provider
- The cloud method must have encryption and password protection
Adverse Action
The new regulations can be located here.
The information contained herein is for informational purposes only. Clients are encouraged to consult with their legal counsel on the impact of these new regulations. Sterling is not a law firm, and none of the information contained in this notice is intended as legal advice.
This content is offered for informational purposes only. First Advantage is not a law firm, and this content does not, and is not intended to, constitute legal advice. Information in this may not constitute the most up-to-date legal or other information.
Readers of this content should contact their attorney or lawyer to obtain advice concerning any particular legal matter. No reader, or user of this content, should act or refrain from acting on the basis of information in this content without first seeking legal advice from counsel or lawyers in the relevant jurisdiction. Only your individual attorney or legal advisor can provide assurances that the information contained herein – and your interpretation of it – is applicable or appropriate to your particular situation. Use of, and access to, this content does not create an attorney-client relationship between the reader, or user of this presentation and First Advantage.