In Part 1 and Part 2 I discussed four steps that I recommend employers follow in using criminal records.  Here in Part 3 and the last part of this series, I address the process of the handling of the documents.

 Step 5:  Handling Documents with CORI

Criminal records information obtained from any source is confidential, and employers must take precautions to insure that such information is protected from disclosure.  Because of the highly confidential nature of criminal records, the number of individuals who are authorized to request, access, receive and review such  information must be limited, and there are strict procedures for handling, storing and destroying criminal records information.  The new regulations provide for controls by:

• Requiring the designation of a CORI Representative for an employer;
• Requiring a Secondary Dissemination Log to track all distribution of CORI;
• Limiting employer registration for CORI to one year increments; and
• Limiting the validity of employee or applicant Acknowledgement Forms to 12 months from the execution date or the end of employment, whichever is sooner.

In my prior blog post, I provided the first two steps for an employer to obtain and use CORI in Massachusetts based on the new CORI regulations issued on May 25, 2012.  This post addresses the next two steps in this process.

These blog posts also address when an employer conducts its own CORI checks.  However, instead of conducting the background checks themselves, employers may request an outside consumer reporting agency to perform the background checks.  If you use or are an outside consumer reporting agency, please note that some of the requirements of the new regulations may be different than described in my blog posts.

Step 3:  Notifying Employee/Applicant of CORI

Once CORI is obtained by an employer, the employer must provide to the employee or applicant a copy of the obtained information and the source of the CORI before making any adverse employment decision based on the CORI, or even asking the employee/applicant questions regarding his/her criminal record.

If the employer intends to make an adverse employment decision based on the CORI, the employer is first required to:

• notify the individual in writing of the potential adverse employment action;
• provide a copy of the CORI, identifying