USA Staffing Rules of Behavior
In accordance with the Office of Management and Budget (OMB) Memorandum M-06-16, Protection of Sensitive Agency Information (Opens in new window) , and to protect the confidentiality, integrity and availability of the U.S. Office of Personnel Management's (OPM's) USA Staffing system, rules of behavior on the safe handling of data must be followed when accessing Personally Identifiable Information (PII) (Opens in new window) in USA Staffing. The loss of PII can result in substantial harm, embarrassment, and inconvenience to individuals and may lead to identity theft or other fraudulent use of the information.
Once annually, every USA Staffing user must read and agree to the Rules of Behavior when signing into the system before they are granted access to USA Staffing features and data. This requirement also applies to accounts assigned to automation acting as a system user. Additionally, agency personnel creating and managing automated user accounts for the purpose of robotic process automation accept responsibility for the permissions assigned and all actions executed by these accounts within USA Staffing.
√ I acknowledge that I have access to download/transfer Controlled Unclassified Information (CUI) (Opens in new window) in the USA Staffing system.
√ I acknowledge my responsibility to ensure the confidentiality, integrity, and availability of USA Staffing information in a manner consistent with its sensitivity.
√ By being granted access to Controlled Unclassified Information (CUI) (Opens in new window), I am obligated to protect this information from unauthorized disclosure.
√ I agree that my obligation to safeguard the confidentiality of Controlled Unclassified Information (CUI) (Opens in new window) shall be in effect until a transfer of duties no longer requires access to this data or until termination of my employment.
√ I will obtain, use or disclose such data only in connection with the performance of my official duties solely for authorized purposes. I will not disclose any data to other agencies or persons not expressly authorized to receive or have access to it. I will make any such authorized disclosures in accordance with established regulations and procedures.
√ I will encrypt (Opens in new window) any PII data downloaded/transferred from USA Staffing on any portable storage device, including laptops, PDAs, iPods, thumb drives, external hard drives, etc.
√ I will erase PII data downloaded/transferred from USA Staffing within 90 days unless its official use is still required.
√ Upon discovering a security incident, I will immediately report it in accordance with my Agency specific incident reporting procedures and shall immediately notify the OPM Security Operations Center (SOC) at [email protected] or 844-377-6109.
√ I will protect my authentication tokens from disclosure and loss at all times.
√ I will not allow others to use my User ID and I will not access other users' accounts. I will not attempt to access accounts or data that are not expressly authorized to me. I understand that I am accountable for all actions taken under my User ID.
√ I understand that any changes in my employment status or changes in my job responsibilities may require my access to be modified or terminated.
√ I will ensure that any work performed remotely or off-site will be provided the same level of protection as provided at the office.
√ I will ensure proper protection and disposition of printed documents containing PII obtained through the USA Staffing system.
√ I understand that all conditions and obligations imposed upon me by these rules apply during the time I am granted access to the USA Staffing system. I understand I am being granted permission to access OPM's USA Staffing system and data as specified above, and that my use of this access may be monitored for compliance.
√ I understand that any system user who does not comply with these rules is subject to penalties including suspension or cancellation of system privileges and possible criminal prosecution. OPM will enforce the use of penalties against any user who willfully violates Federal system security.
√ Users are required to sign out at the conclusion of work assignments or at any time they are not actively involved in work assignments requiring the usage of USA Staffing.
For cases in which a system user engages with an external assessment provider including, but not limited to The Office of Personnel Management’s USA Hire system, the user agrees that:
√ I understand a formal interagency agreement must be in place between my agency and OPM prior to receiving access to, and using, USA Hire.
√ I understand I may only use the USA Hire system and USA Hire materials (including USA Hire assessments) in a manner consistent with the terms of the formal agreement or contract denoted above.
√ I understand that access to the USA Hire assessments must be restricted to applicants responding to a job opening who meet the minimum qualifications for that job opening (i.e., I am not authorized to view or modify the content of any USA Hire assessment).
√ I understand that in cases where I may be exposed to USA Hire assessment content, I may not discuss, share, or reproduce the assessment content (e.g., questions, scoring information).
√ I understand I must immediately report any suspected breach of these rules related to USA Hire to the OPM point of contact for the interagency agreement or contract and [email protected]
√ I understand that OPM reserves the right to terminate anyone’s access to and use of the USA Hire system and materials (including assessments) at any time for violating these requirements.
For cases in which a system user is granted access to Applicant Flow Data including, but not limited to data on an applicant’s race, ethnicity, or disability, the user agrees that:
√ I acknowledge that I have access to download/transfer Controlled Unclassified Information (CUI) (Opens in new window) about applicants.
√ I acknowledge my responsibility to mitigate any risk of the data being used to affect staffing decisions.
√ I acknowledge my responsibility that use of this data will be consistent with the ‘Purpose and Routine Uses’ language provided to applicants in the USAJOBS Demographic profile.
√ I acknowledge my responsibility that this data shall not be used for:
‒Influencing the decision to close or extend job announcements
‒Influencing the decision to cancel recruitment actions
‒Influencing the decision to use or not use a referral list of applicants
‒Influencing selection decisions
‒Identifying the race, ethnicity, or gender of specific named employees
√ I understand that this data can be used for:
‒Aggregate human capital reporting
‒Determining rates of demographic representation in recruitment efforts
‒Determining rates of demographic representation in hiring or merit promotion selections
‒Determining rates of qualifications among demographic groups
‒Evaluating the effectiveness of recruitment in reaching targeted demographic groups
√ I agree to these rules and the appropriate safeguarding of data.
√ I assume liability for misuse of data caused by sharing data with other recipients.
√ I acknowledge my responsibility to ensure the confidentiality, integrity, and availability of applicant data in a manner consistent with its sensitivity.
√ By being granted access to Controlled Unclassified Information (CUI) (Opens in new window), I am obligated to protect this information from unauthorized disclosure.
√ I agree that my obligation to safeguard the confidentiality of Controlled Unclassified Information (CUI) (Opens in new window) information shall be in effect until a transfer of duties no longer requires access to this data or until termination of my employment.
√ I will obtain, use or disclose such data only in connection with the performance of my official duties solely for authorized purposes.
√ I will not disclose any data to other agencies or persons not expressly authorized to receive or have access to it. I will make any such authorized disclosures in accordance with established regulations and procedures.
√ I will encrypt any applicant data on any portable storage device, including laptops, PDAs, iPods, thumb drives, external hard drives, etc.
√ Upon discovering a security incident, I will immediately report it in accordance with my Agency specific incident reporting procedures and shall immediately notify the OPM Security Operations Center (SOC) at [email protected] or 844-377-6109.
√ I will protect my authentication tokens from disclosure and loss at all times.
√ Under this agreement, on behalf of my agency, I accept responsibility for carrying out its terms and conditions. I further agree that all necessary administrative steps will be taken to assure that persons who have access to this data will be informed of this agreement and will be required to comply with it.
These restrictions are consistent with and do not supersede, conflict with or otherwise alter the employee obligations, rights or liabilities created by Executive Order 12356; Section 7211 of Title 5, United States Code (governing disclosures to Congress); Section 2302(b)(8) of Title 5, United States Code, as amended by the Whistleblower Protection Act (governing disclosures of illegality, waste, fraud, abuse or public health or safety threats); the Intelligence Protection Act of 1982 (50 U.S.C. 421 et seq.) (governing disclosures that could expose confidential Government agents), and the statutes which protect against disclosure that may compromise the national security, including Sections 641, 793, 794, 798 and 952 of Title 18, United States Code, and Section 4(b) of the Subversive Activities Act of 1950 (50 U.S.C. Section 783(b)). This agreement shall not nullify or affect in any manner any other secrecy or nondisclosure Agreement which I have executed or may execute with the United States Government.
