DHS 157.9704(2)(d)(d) Health and Human Services security risk assessments for possession and use of select agents and toxins under 42 CFR 73. DHS 157.9704(2)(e)(e) Hazardous Material security threat assessment for hazardous material endorsement to commercial driver’s license under 49 CFR 1572. DHS 157.9704(2)(f)(f) Customs and Border Protection’s Free and Secure Trade (FAST) Program. DHS 157.9704 HistoryHistory: CR 16-078: cr. Register January 2018 No. 745, eff. 2-1-18; renumbered from DHS 157.104 under s. 13.92 (4) (b) 1., Stats., Register January 2018 No. 745. DHS 157.9705(1)(1) Any licensee who obtains background investigation information on an individual under this subchapter shall establish and maintain a system of files and written procedures for protection of the record and the personal information from unauthorized disclosure. DHS 157.9705(2)(2) A licensee may not disclose the background investigation record or personal history information collected and maintained to persons other than the subject individual, the individual’s representative, or to persons who need access to the information in order to perform assigned duties in the process of granting or denying unescorted access to category 1 or category 2 quantities of radioactive material, safeguards information, or safeguards information-modified handling. No individual authorized to have access to the information may disseminate the information to any other individual who does not have a need to know. DHS 157.9705(3)(3) The personal information obtained on an individual from a background investigation may be provided to another licensee under the following conditions: DHS 157.9705(3)(a)(a) Upon the individual’s written request to a licensee holding the data to disseminate the information contained in the individual’s file. DHS 157.9705(3)(b)(b) The recipient licensee verifies information such as name, date of birth, social security number, gender, and other applicable physical characteristics. DHS 157.9705(4)(4) The licensee shall make background investigation records obtained under this subchapter available for examination by the department. DHS 157.9705(5)(5) The licensee shall retain all fingerprint and criminal history records received from the FBI, including data indicating no record, , or a copy of these records if the individual’s file has been transferred, for 3 years from the date the individual no longer requires unescorted access to category 1 or category 2 quantities of radioactive material. DHS 157.9705 HistoryHistory: CR 16-078: cr. Register January 2018 No. 745, eff. 2-1-18; renumbered from DHS 157.105 under s. 13.92 (4) (b) 1., Stats., Register January 2018 No. 745. DHS 157.9706DHS 157.9706 Access authorization program review. DHS 157.9706(1)(1) Each licensee shall be responsible for the continuing effectiveness of its access authorization program. Each licensee shall ensure that its access authorization program is reviewed for compliance with the requirements of this subchapter and that comprehensive actions are taken to correct any noncompliance that is identified. The licensee shall evaluate all program performance objectives and requirements. Each licensee shall periodically, and at least annually, at intervals not to exceed 13 months, review its access authorization program content and implementation. DHS 157.9706(2)(2) The licensee shall document the results of its access authorization program review and any recommendations. Documentation of the review shall identify conditions that are adverse to the proper performance of the access authorization program, the cause of the conditions, and, when appropriate, recommended corrective actions, and corrective actions taken. A licensee shall review the results of its access authorization program review and take any additional corrective actions necessary to preclude repetition of the condition, including additional review. DHS 157.9706(3)(3) The licensee shall maintain it access authorization program review records for 3 years. DHS 157.9706 HistoryHistory: CR 16-078: cr. Register January 2018 No. 745, eff. 2-1-18; renumbered from DHS 157.106 under s. 13.92 (4) (b) 1., Stats., Register January 2018 No. 745; CR 22-015: am. (1) Register June 2023 No. 810, eff. 7-1-23. DHS 157.9707(1)(a)(a) Any licensee that possesses a category 1 or category 2 quantity of radioactive material shall establish, implement, and maintain a security program under the requirements of this subchapter. DHS 157.9707(1)(b)(b) An applicant for a new license and any licensee that would become newly subject to the requirements of this subchapter upon application for amendment of its license shall implement the applicable requirements of this subchapter and be inspected by the department, before taking possession of a category 1 or category 2 quantity of radioactive material. DHS 157.9707(1)(c)(c) Any licensee that has not previously implemented the physical protection license condition requirements or been subject to ss. DHS 157.9707 to 157.9715 shall provide written notification to the department at least 90 days before aggregating radioactive material to a quantity that equals or exceeds the category 2 threshold. DHS 157.9707(2)(2) General performance objective. . Each licensee shall establish, implement, and maintain a security program that is designed to monitor and immediately detect, assess, and respond to an actual or attempted unauthorized access to category 1 or category 2 quantities of radioactive material. DHS 157.9707 HistoryHistory: CR 16-078: cr. Register January 2018 No. 745, eff. 2-1-18; renumbered from DHS 157.107 under s. 13.92 (4) (b) 1., Stats., and correction in (1) (c), (3) made under s. 13.92 (4) (b) 7., Stats., Register January 2018 No. 745.