Resource Center

Offshoring

Question: Does Truescreen offshore personally identifiable information? What are the dangers of doing so?

Response & Analysis:

Truescreen does not store or process Personally Identifiable Information (“PII”) outside of the United States. PII is generally defined as any information that allows the identity of an individual to be directly or indirectly inferred, including any information that is linked or is linkable to that individual. Examples of PII used in applicant screening services include name, date of birth, Social Security number (SSN) and employment and/or educational history. If PII is lost, compromised or disclosed without permission, it could result in substantial harm, including financial loss and legal liability.

We may transfer PII to third parties outside of the United States or its territories only when it is necessary to obtain or verify information from international sources. This only occurs in cases where applicant/consumer has resided or has been employed internationally and only takes place when you request that we obtain or verify this information. In such instances, we send only the minimum PII necessary to complete the verification. We are committed to data security and the prevention of unauthorized access to PII, and have put in place appropriate physical, electronic and managerial procedures to safeguard and secure the information we collect.

The business practice of “offshoring” or transferring PII to foreign call centers or data operations outside of the United States in order to reduce labor and production costs has become more widespread in recent years. By cutting costs and undercutting competitors’ pricing, some companies may feel they are able to gain a competitive advantage.

But the release of PII to locations outside the United States greatly increases security risks and the potential for identity theft. Data is not typically offshored to countries with strong laws and extended data protections in place, like the United Kingdom, France or Switzerland. Instead, it is more likely to be sent to countries with less developed concepts of security that lack data protection. In 2011, the number of countries hosting organizations that fell victim to a data compromise increased by 50% from the prior year.1 And when it comes to the type of data compromised, a recent study shows that personal information comprised 95% of the records lost in data breaches, an enormous uptick from previous years.2

While data breaches and identity theft can occur in the United States, there are numerous laws and protections in place to mitigate the risks and provide recourse to an aggrieved consumer. Sending PII offshore, however, may negate the protections of our privacy, security, consumer protection and identity theft laws. There are numerous examples of data breaches and identity theft occurring in call centers in India, the Philippines and other countries commonly outsourced to and of PII being easily sold and used illegally. These risks exist even if the outsourced facility is a subsidiary of a U.S. company, as once data leaves the United States, many of the legal protections of U.S. laws disappear.

In addition, once data is in a foreign country, it may become subject to that country’s access and use. For example, intellectual property or trade secrets that are offshored may be subject to a foreign government’s reach and control; once the data leaves the United States, it may be out of the U.S. government’s jurisdiction and control. For decades, China has been accused by Western businesses and governments of not properly protecting foreign intellectual property and, in fact, of allowing it to be copied and claimed as Chinese intellectual property. China’s “weak legal environment” has been seen as permitting its government to intervene in the intellectual property rights (IPR) of others and helping its “own companies ‘re-innovate’ competing IPR as a substitute for foreign technologies.”3

Many consumers and employers are unaware that PII is being sent overseas. On January 1, 2012, California became the first state to mandate disclosure in a consumer reporting agency’s privacy policy if PII is sent outside of the United States. It does not prohibit offshoring, but mandates disclosure that information is being sent outside the U.S. borders.

1 Verizon RISK Team, “2012 Data Breach Investigations Report,” (2012), p. 12.
2 Verizon RISK Team, p. 42.
3 Adam Segal, “China’s Innovation Wall: Beijing’s Push for Homegrown Technology,” Foreign Affairs (published by the Council on Foreign Relations), September 28, 2010.

All Rights Reserved © 2017 Truescreen, Inc.
This document and/or presentation is provided as a service to our customers. Its contents are designed solely for informational purposes, and should not be inferred or understood as legal advice or binding case law, nor shared with any third parties. Persons in need of legal assistance should seek the advice of competent legal counsel. Although care has been taken in preparation of these materials, we cannot guarantee the accuracy, currency or completeness of the information contained within it. Anyone using this information does so at his or her own risk.

Even our RFP PROCESS is state-of-the-art.

Find out why
RFP Kit

What Our Clients Are Saying

The service you provide at Truescreen has been the best I have ever seen in comparison to other vendors I have worked with in the past! You guys rock!

Talent Acquisition Specialist
Retail Store Chain

I am very impressed with your company’s customer service, and the Truescreen portal seems to be an intuitive, user-friendly design.

Learning Coordinator
Public College

Our team loves working with Truescreen and the expedient, thorough service and results we get from you.

Human Resources Executive
Large Hotel Chain

I appreciate all your hard work ensuring that individuals are cleared through our processes. Truescreen makes my job so much easier and less stressful.

Human Resources Analyst
Large Academic Institution
Sending...
Thank you for your interest in Truescreen. We have received your message and will contact you within one business day.
Our apologies, there was an error processing your request.  Please resubmit your message or contact us at 888-276-8518.
You have exceeded the number of attempts to submit this form. As a result, your IP address has been temporarily blocked.
Our apologies, there was an error processing your request.  Please resubmit your message or contact us at 888-276-8518.

Get In Touch

Contact Us *fields required

What are your Interests?optional

You are leaving Truescreen.com

Ok, Continue Cancel

×
×