Skip to main content
California Department of Education Logo

Management Bulletin 11-20


Early Education and Support Division

Subject: Centralized Eligibility List Data: Security and Confidentiality Requirements

Number: 11-20

Date: June 2011

Expires: Until Rescinded

Authority: California Education Code, Section 8227; California Code of Regulations, Title 5, Section 18117; and California Civil Code, Section 1798.80–1798.84

Attention: All County Centralized Eligibility List Administrators and All Executive Officers and Program Directors of All Child Care and Development Programs


Purpose

The purpose of Management Bulletin (MB) 11-20 is to provide Centralized Eligibility List (CEL) Administrators and child care and development contractors with requirements for data security and confidentiality.

Background

In May 2011, the California Department of Education (CDE), Early Education and Support Division (EESD) posted direction to CEL administrators on the actions that had to be taken due to the elimination of state funding for the CEL. This required CEL Administrators to:

  • Contact the assigned Field Services Consultant to request prior written approval for disposition of equipment and complete an equipment inventory form to document each piece of equipment costing $500 or more that was purchased, in whole or in part, with CEL contract funds
  • Retain all program operating records for a minimum of five years in accordance with Education Code (EC), Section 33421, and California Code of Regulations, Title 5 (5 CCR), Section 18067

The EESD posted direction on the actions that must be taken by direct service contractors currently participating in the CEL.

Policy

5 CCR, Section 18117 requires contractors to ensure that the use or disclosure of all information pertaining to the child and his/her family is restricted to purposes directly connected with the administration of the subsidized child care program.

California Civil Code, Section 1798.80–1798.84 requires that personally identifiable student level data no longer needed, or relevant, is destroyed. All reasonable steps must be taken to dispose, or arrange for the disposal, of records containing personal information when the records are no longer to be retained by:

  • Shredding,
  • Erasing, or
  • Modifying the personal information in those records to make it unreadable or undecipherable through any means

Further information on security laws can be found on the California Office of Information Security Web page at http://www.cio.ca.gov/OIS/ External link opens in new window or tab..

Directive

A. Directives for CEL Administrators Regarding Disposition of Equipment Containing Confidential, Sensitive or Personally Identifiable Data

Before transferring or disposing of equipment, CEL administrators must remove all confidential, sensitive or personal information from all equipment/media including computers, storage components, and removable storage equipment. This would include using a disk wipe utility or physical device (such as degausser) to fully erase confidential data prior to the disposal, or transfer of any equipment containing a hard drive, removable media, or any media with data storage capabilities.

B. Directives for CEL Administrators Regarding Storage of Program Data During Retention Period

CEL Administrators must ensure that all program operating records, including hard copies of CEL applications, that must be retained for a minimum of five years in accordance with EC, Section 33421 and 5 CCR, Section 18067 are stored in safe secure manner.

During the five year retention period, all program operating records with confidential information in paper form should be kept in a locked location, and all program operating records with confidential information in electronic form should only be accessible by authorized users. Preferably, any confidential information in electronic form should also be encrypted.  

C. Directives for CEL Administrators Regarding Destruction of Program Data Following Retention Period

CEL Administrators must destroy all program operating records, including hard copies of CEL applications after the five year retention period if no litigation, claim, or audit was started before the expiration of the five-year period.

If there was any litigation, claim or audit started before the expiration of the five-year period, the records shall be retained until all litigation, claims or audit findings involving the records have been resolved and final action taken in accordance with EC, Section 33421 and 5 CCR, Section 18067. After that the records should be confidentially destroyed.

D. Directives for Child Care and Development Direct Services Contractors

Any EESD direct services contractor with hard copies of CEL applications must retain these records as stated in directive B above. After the required retention period, these records must be destroyed pursuant to directive C above.

For questions regarding:

  • Information security, please contact Mark Lourenco, Information Security Officer, Information Security and Privacy Office, Technology Services Division, by phone at 916-322-8334 or by e-mail at mlourenco@cde.ca.gov
  • Audits, please contact Derald Reisinger, Associate Management Auditor, External Audits Office, Audits and Investigations Division, by phone at 916-322-5053 or by e-mail at dreising@cde.ca.gov

This Management Bulletin is mandatory only to the extent that it cites a specific statutory and/or regulatory requirement. Any portion of this Management Bulletin that is not supported by a specific statutory and/or regulatory requirement is not prescriptive pursuant to California Education Code Section 33308.5.

Questions:   Early Education and Support Division | 916-322-6233
Last Reviewed: Wednesday, September 9, 2015

Recently Posted in Child Development

  • April 2016 Meeting Materials (added 05-May-2016)
    This page contains supplemental materials that were presented at the April 2016 State Advisory Council Meeting.
  • Notice of Proposed Rulemaking for the CCDF (added 15-Apr-2016)
    Joint notice of Proposed Rulemaking for the Child Care and Development Fund from the California Department of Education and the California Department of Social Services
  • Transcript of Public Hearing January 12, 2016 (added 08-Apr-2016)
    The following is a transcript of the video recording of the live public hearing facilitated by the California Department of Education on January 12, 2016, for the Child Care and Development Fund 2016–18 State Plan.
  • January 12, 2016 Public Hearing Session Webinar (added 08-Apr-2016)
    The following is a video recording of a live public hearing facilitated by the California Department of Education for the Child Care and Development Fund 2016–18 State Plan.
  • Webinar Slides from January 12, 2016 (PDF) (added 08-Apr-2016)
    Webinar Slides from the January 12, 2016 Public Hearing on the 2016-18 Child Care and Development Fund State Plan

  • PSE FY 2015-16 (PDF) (added 01-Apr-2016)
    Instructional presentation on the fiscal year (FY) 2015-16 Program Self-Evaluation (PSE).