Applicant Privacy Policy

1. Institutional Commitment & Scope

The Richmond County School System Student Transportation Department ("RCSS Transportation," "we," "us," or "our") is dedicated to protecting the privacy, confidentiality, and security of all applicant personal information. This Privacy Policy details the standards governing the collection, use, transmission, and retention of data provided through our online employment application portal.

By submitting an application for employment, you consent to the data collection and processing practices described herein in accordance with Georgia state educational standards and federal employment laws.

2. Information Collected

2.1 Personal & Employment Information

During the employment application process, we collect relevant background details necessary for hiring qualification:

• Contact Identification: Full name, current residential address, phone number, email address.
• Statutory Verification: Date of birth, encrypted Social Security Number (SSN) for mandated background screening.
• Professional Background: Employment history, job duties, dates of service, previous supervisors, and reason for separation.
• Driver & Operator Credentials: Driver's license number, state of issuance, Commercial Driver's License (CDL) endorsements, and Motor Vehicle Record (MVR) history.
• Professional References: Contact details and professional associations for background confirmation.
• Criminal & Regulatory Disclosures: Legal disclosures required by Georgia Department of Education (GaDOE) pupil transportation regulations.

2.2 Technical & Security Telemetry

To safeguard portal operations against automated abuse and maintain audit trails, our infrastructure records standard technical telemetry, including IP address, browser type, device characteristics, and session security tokens (such as Cloudflare Turnstile verification).

3. Purpose & Use of Applicant Data

Applicant data is utilized strictly for lawful educational employment administration:

4. Data Security & Cryptographic Protection

We employ defense-in-depth technical and administrative safeguards:

• Field-Level Encryption: Sensitive data, such as Social Security Numbers, is encrypted with AES-256-GCM before database storage.
• Encrypted Transport: All data in transit is protected using modern TLS encryption.
• Role-Based Access Control (RBAC): Access is strictly limited to authorized district transportation hiring officials.
• Multi-Factor Authentication (MFA): All administrative accounts require hardware- or TOTP-based 2FA.

5. Data Retention Schedules