C&C Power uses biometric time clocks at certain sites through which an employee’s fingerprint is scanned. C&C Power currently uses Paychex and its licensors as its time and attendance tracking system vendor (“Vendor”). In accordance with Illinois law, C&C Power has implemented this policy relating to the capture, collection, use, storage, retention, disclosure, redisclosure, and destruction of biometric identifiers and information (collectively, “biometric data”). All employees whose biometric data is subject to this policy will be required to sign an Employee Consent and Release Form upon hire and as requested thereafter by C&C Power. With this Employee Consent and Release Form, you agree and consent to the capture, collection, use, storage, retention, disclosure, and redisclosure of biometric data by and to C&C Power and its Vendor.
The terms “biometric identifier” and “biometric information” as used in this Policy and Employee Consent Form are intended to have the same definition provided in the Illinois Biometric Information Privacy Act, 740 ILCS 14/1, et seq.
Purpose for Collection of Biometric Data
C&C Power, through its Vendor, captures, collects, uses, stores, retains, discloses, and rediscloses biometric data only for employee identification, fraud prevention, and the recording and tracking of an employee’s time and attendance as also set out in the Employee Handbook.
Retention Schedule and Destruction of Biometric Information
C&C Power, through its Vendor, will retain employee biometric information collected pursuant to this Policy until such time as employment is terminated or C&C Power discontinues its use of biometric information pursuant to this Policy. Upon termination of employment or discontinued use of biometric time clocks, C&C Power will notify its Vendor. Once C&C Power provides such notice, Vendor will automatically destroy biometric information in Vendor’s possession. As such, an employee’s biometric data will be permanently destroyed within thirty (30) days of an employee’s separation from employment.
Biometric Data Safeguards
C&C Power and its Vendor use appropriate information security safeguards designed to protect biometric data when it is being collected, stored, and transmitted. These safeguards include firewalls, physical and digital security measures, encryption, access restrictions, password authorization, system logging, and file backup. C&C Power only has access to encrypted biometric data as required to fulfill necessary job functions.