Introducing Biometrics

Privacy Notice for Candidates

Beginning with the Fall 2008 ASPPA examination cycle, candidates will experience a more efficient and secure check in process when sitting for an ASPPA proctored examination at Prometric testing centers. Prometric is pleased to offer a Biometric Identity Management solution to increase security in their testing centers. Prometric enlisted the expertise of the world’s two leading biometric organizations and implemented the Biometric Identity Management solution as part of their Candidate Identity Management System (CIMS) worldwide starting back in the summer of 2006. The goals of the Candidate Identity Management System are to improve candidate identity validation, increase security during check in and breaks, provide additional protection of intellectual property and improve candidate check-in efficiency. These goals are accomplished by automating the existing check-in process and using biometrics to track candidate movement during check-in and breaks.

The Candidate Identity Management System is designed to protect test candidate privacy and improve the security and integrity of the testing process.

How does the Candidate Identity Management System work?
What information is collected in the CIMS?
How is the information in the CIMS used?
How long is my personal information retained by the CIMS?
When is the information in the CIMS disclosed to third parties?
What choices do I have regarding the CIMS?
Can I access my information in the CIMS?
How is the information in the CIMS secured?
Whom do I contact if I have a question about CIMS?

How does the Candidate Identity Management System work?

To use CIMS, you must place your finger on the scanner. The CIMS equipment will create a digitized representation of your fingerprint. This representation is called a template. This template is an algorithm which represents your fingerprint. The system also stores the fingerprint image. This template will be stored with other personal information you provide to ASPPA, along with your photo identification documentation that you present at the testing center in order to test – this allows Prometric to identify you accurately during the testing process. As you move around the test center, you will be able to use your finger to authenticate yourself at the scanners located throughout the test center, avoiding the need to provide additional identification to supervisory personnel.

What information is collected in the CIMS?

The CIMS contains a digitized representation of your fingerprint, along with your name, address, telephone number (if you provided one), date of birth or age, identification document number, and a scanned copy of your identification document (such as your driver’s license), which will include your digitized image.

How is the information in the CIMS used?

Personal information in the CIMS is used by Prometric to: (1) administer tests and verify your identity on an ongoing basis as you participate in this test by positively identifying you as you move in and out of the test lab during the examination, (2) protect your privacy by enabling you to move around the test center without the requirement that identification documents be presented regularly, (3) identify and prevent testing fraud and maintain the integrity of the testing process by detecting and preventing test taking by unauthorized candidates, (4) improve security of test centers by detecting and preventing unauthorized access of candidates to secure areas, and (5) if needed, for legal compliance. For example, when you are taking your test, Prometric would be able to determine if another individual returned after a break and pretended to be you in order to access the test content.

How long is my personal information retained by the CIMS?

The fingerprint template is permanently erased from the CIMS database within forty-eight (48) hours after your test is completed. The information from your identification document, the digital image, and digitized representation of your identification document is retained for fraud investigation or other legal purposes for a reasonable period of time required for potential legal or fraud investigations. That period will not exceed five (5) years. This information is not transferred to ASPPA nor will be used for future testing.

When is the information in the CIMS disclosed to third parties?

Please keep in mind that the fingerprint template and image are deleted in their entirety within 48 hours after completion of your examination. Prometric will not disclose the demographic information to any third party except as required by law or as necessary to complete a fraud investigation directly related to the candidate.

What choices do I have regarding the CIMS?

All candidates are required to provide identification documents and individuals who fail to provide valid identification will be refused admission to test. Candidates are encouraged to provide a fingerprint because it provides a higher level of security during the testing experience, is more efficient during check in/check out, and requires less presentation of identification documents and exposure of that information. Because the fingerprint template is deleted within 48 hours of the examination being administered, there is no issue with risks of long term retention. A candidate generally will not be refused an examination because he or she does not wish to provide a fingerprint. However, ASPPA will be informed of individuals who refuse to provide a fingerprint.

Can I access my information in the CIMS?

Upon request and confirmation of your identity, Prometric will determine if you have a record in the CIMS. If so, we will provide you with a copy of the personal information maintained in the system. Note that the fingerprint template and image are not retained and are deleted from the system within 48 hours of the examination being administered to a candidate. The only information retained is that obtained from your identification document.

How is the information in the CIMS secured?

Prometric has implemented appropriate technical, physical and administrative safeguards to help protect your personal information against unauthorized access or loss. Prometric’s employees who access the information are trained on these procedures and bound by appropriate confidentiality obligations.

Who do I contact if I have a question about CIMS?

If you have questions about CIMS and how it works you can contact ASPPA via e-mail at education@asppa.org

We are very pleased that Prometric is able to offer this new, more efficient and secure service to our exam candidates