Blindline^SM Information and Referral Call Center Privacy Policy

VISIONS Services for the Blind and Visually Impaired is committed to maintaining the confidentiality of the information provided by clients to the Blindline^SM Information and Referral Call Center.

The Blindline Privacy Policy, a formal statement of rules and regulations compliant with the New York state laws concerning the protection of client information provided to the Blindline Call Center. The objective of the Blindline Privacy Policy is the responsible management of Blindline client information. It is intended to reflect the high regard which VISIONS views the management of information provided by clients. VISIONS will review the Blindline Privacy Policy periodically to ensure it is relevant, and remains current with changing laws, technologies and client needs. VISIONS is not responsible for breaches of security by third parties.

Accountability

VISIONS, through the Blindline Call Center, is responsible for personal information under its control and shall designate one or more persons who are accountable for the Blindline Call Center's compliance with the Blindline Security and Privacy Policy. Responsibility for ensuring compliance with the provisions of the Blindline Privacy Policy rests with the senior management of VISIONS Services and the Blindline Call Center, which shall designate one or more Privacy Compliance Supervisors to be accountable for Blindline Call Center's compliance with the Blindline Privacy Policy.

Other individuals within the Blindline Call Center may be designated to act on behalf of the Privacy Compliance Supervisors, or to take responsibility for the day-to-day collection and processing of personal information. The Blindline Call Center shall make known, upon request, the identity of the Privacy Compliance Supervisors who oversee the Blindline Call Center's compliance with the Blindline Privacy Policy. Senior management of VISIONS Services has implemented policies and procedures to give effect to the Blindline Privacy Policy, including:

1. Implementing procedures to protect personal information and to oversee the Blindline Call Center's Compliance with the Blindline Privacy Policy
2. Training and communicating to staff about the Blindline Call Center's policies and practices
3. Establishing procedures to receive and respond to inquiries or complaints

The Blindline Privacy Compliance Supervisors may be contacted with any questions or comments, at:

Blindline
VISIONS Services for the Blind and Visually Impaired
500 Greenwich Street, 3rd Floor
New York, NY 10013

Limiting the Collection of Personal Information to That Which Is Reasonably Necessary to Address Client Needs

The Blindline Call Center collects personal information only for the following purposes:

1. To efficiently address client needs
2. To conduct and improve VISIONS business and/or services
3. To help provide necessary referral assistance
4. Other uses as required by the law

Unless required by the law, the Blindline Call Center shall not collect personal information for any other purpose without first informing the client.

Limiting Access and Disclosure of Personal Information

The Blindline Call Center shall not use personal information for purposes other than those for which it was provided, except as otherwise disclosed to the client and/or approved by a Blindline Privacy Compliance Supervisor.

Only those VISIONS employees who require access for the purposes set forth above are granted access to personal information about clients.

Limiting the Length of Retention of Personal Information

The Blindline Call Center shall retain personal information only until fulfillment of the purposes for which it was collected, except where personal information is reasonably necessary to provide ongoing assistance to a client. In such cases, the Blindline Call Center shall retain the information that is reasonably sufficient to enable the provision of services until it is determined that retention is no longer necessary.

The Blindline Call Center shall maintain reasonable and systematic controls and practices for information and records retention and destruction. These controls and practices will apply to personal information that is no longer necessary or relevant for the identified purposes and not required by law to be retained.

Security Safeguards

The Blindline Call Center shall protect personal information by adhering to security safeguards appropriate to the sensitivity of the information.

The Blindline Call Center shall establish commercially reasonable protocols to protect personal information, regardless of the format in which it is held, through appropriate security measures against such risks as loss or theft, unauthorized access, disclosure, copying, use, modification or destruction.

Every Blindline Call Center employee with access to personal information shall be trained, and required as a condition of employment, to respect the confidentiality of personal information.

The Blindline Call Center shall protect personal information disclosed to third parties affiliated with the Blindline Call Center by contractual agreements stipulating the confidentiality of the information and the purposes for which it is to be used.

Transparency

The Blindline Call Center shall make readily available specific information about its policies and practices relating to personal information.

The Blindline Call Center shall make information about its policies and practices available online. Such information will include:

1. The contact information for the Blindline Privacy Compliance Supervisors.
2. The means of gaining access to one's personal information held by the Blindline Call Center.

Client Access to Information

The Blindline Call Center shall, upon a written request to the Privacy Compliance Supervisors, provide individuals with access to information that is being retained about them. Upon written request to the Privacy Compliance Supervisors, the Blindline Call Center shall review and, if deemed appropriate, correct or complete any personal information on a client that is determined to be inaccurate or incomplete.

Challenging Compliance

Client shall be able to address a challenge concerning compliance with the above rules and regulations to the designated person or persons accountable for the Blindline Call Center's compliance with the Blindline Privacy Policy.

Complaints or inquiries about the handling of personal information shall be directed to the Privacy Compliance Supervisors. The Privacy Compliance Supervisors shall investigate all written complaints concerning compliance with the Blindline Privacy Policy. If the Privacy Compliance Supervisors determine that a complaint is justified, the Blindline Call Center shall take appropriate measures to resolve the complaint including, if necessary, amending its policies and procedures. A client shall be informed of the outcome of the investigation regarding his or her complaint.

Definitions

Blindline Call Center - An entity established by VISIONS Services for the Blind and Visually Impaired, administered for the purpose of providing callers with one point of contact from which to obtain information on all blind or other multiple-disability organization services in New York State. All rights and obligations herein pertaining to the Blindline Call Center apply to VISIONS Services for the Blind and Visually Impaired.
Client - Any individual or individuals legitimately seeking to avail themselves of the services provided by and through the Blindline Call Center.
Collection - The act of gathering, acquiring, recording, or obtaining personal information by the Blindline Call Center from a client.
Disclosure - Making personal information available to a third party.
Employee - An employee, consultant or contractor of the Blindline Call Center, or VISIONS Services for the Blind and Visually Impaired.
Individual record - Information about a specific complaint/report/call that is associated with a unique identifiable number.
Personal information - Information about an identifiable individual that is recorded in any form. Personal information includes a client's name, telephone number, address, as well as the nature of an identifiable client's inquiry and request. Personal information is information that can be associated with a specific individual. Aggregated information that cannot be traced to identifiable individuals is not considered personal information.