Security Measures
Protecting the Privacy of Member's Information

Privacy of Credit Union Member's Information
Share One, Inc. considers and contracts with our Credit Union customers to maintain the privacy of all member account information.  Member information cannot be released to any third party unless the Credit Union directs Share One, Inc.

Under NCUA Rule 716, Share One, Inc. as the credit union's data processing provider is EXEMPT from the Opt Out clause in the rule.  The following excerpt from NCUA Letter to Credit Unions 01-CU-02 issued in February 2001 outlines this exception:

1. Restricts access to member information of any kind to Share One employees working directly with the credit union to resolve a specific problem, provide a service to the member, or to fulfill a request from the credit union including beta testing of new services.
2. Any member information stored of Share One's systems is protected using a variety of security methods, such as multi-level passwords, intrusion detection, firewalls, or secure socket encryption.
3. Share One provides no access to member information by any 3rd party except via standard services such as credit bureau reporting, statement/microfiche processing, share or loan insurance premium postings which are also exceptions to Rule 716's opt out clause.  Again, such access is provided only at the expressed direction of the Credit Union.
4. Any member information collected by Share One while working with the credit union to provide a service or resolve a problem must be destroyed via data purge/deletion functions or paper shredding.  Data Files stored in Share One facilities must be safeguarded using fireproof safe and restricted access to storage location.  share One does not maintain data files not necessary to the provision of Share One products and services.
5. Share One restricts access by employees who are not directly working with the Credit Unions (administrative, clerical staff) to credit union member information.

Share One encourages our Credit Union customers to consider the following in securing member information:

1. Use all system provided security features to limit access to member account information.
2. Restrict the viewing and printing of member information that includes:  account number, name, address, birth date and most critically the social security number.
3. Where possible deliver data files containing member information using a secure format such as zipped or encrypted file.
4. Limit collection of sensitive member information (name, address, birth date and most critically the social security number) when that information is already available to the Credit Union.  For example, do not require the entry of the member's social security number in the Credit Union's Website based loan application.  The credit union can retrieve this information from existing records.
5. Use only summary level data (no specific account detail) or a "data scramble" utility when collecting demographic information for marketing purposes.