Before participating in a matching program, the responsible authority in each public entity that participates in the matching program shall enter into a written agreement with the other person specifying:

Ask a business law question, get an answer ASAP!
Thousands of highly rated, verified business lawyers.
Click here to chat with a lawyer about your rights.

(1) the rationale, purpose, and legal authority for conducting the program;

(2) a description of the data that will be matched, including each data element that will be used, the approximate number of records that will be matched, and the projected starting and completion dates of the matching program;

(3) procedures for retention and destruction of data created by the matching program consistent with section 138.17;

(4) procedures for ensuring the security of the data;

(5) prohibitions on duplication and redisclosure of data by the person who receives the data, unless authorized by the public entity that releases the data;

(6) procedures governing the use of the data provided by the public entity for the matching program, including procedures governing return to the public entity or destruction of the data consistent with section 138.17; and

(7) information on assessments that have been made on the accuracy of the data that will be used in the matching program.