Newsline No. 22-06
April 24, 2006

The Division of Workers' Compensation reminds EDEX vendors of their data security responsibilities

The Division of Workers' Compensation (DWC) has recently received questions about the security of personal information transferred through the electronic data exchange system (EDEX). The DWC reminds EDEX software vendors, service bureaus and information brokers that, pursuant to Civil Code section 1798.81.5(b), they are responsible for implementing and maintaining reasonable security procedures and practices to protect the personal information they obtain through EDEX from unauthorized access, use, modification, or disclosure. Additionally, Labor Code section 138.7(d) makes it unlawful for any person who has received individually identifiable information from the division to provide that information to any person who is not entitled to it.

The division has updated its Web site to reflect this reminder. The revised EDEX Web page can be accessed at