Biometric Identity Management System
Privacy Notice for USMLE Candidates
The Biometric Identity Management System (BIMS) is designed to improve the security and integrity of the testing process. The USMLE program will be using BIMS as part of the standard test day procedures. The BIMS program is implemented by Prometric (whose corporate headquarters are located at 1501 South Clinton Street, Baltimore, MD 21224, U.S.A.) which acts on behalf of the USMLE program sponsors, as data processor.
This Privacy Notice describes the privacy and security practices that have been established for the BIMS program.
About the BIMS Program
The BIMS program converts a fingerprint to a digital image that is used for identity verification purposes. To use the BIMS, you will place your finger on a scanner at the test center. The BIMS equipment will create a digitized representation of your fingerprint (a “template”). This representation template will be paired with other personal information you provide to your registration entity, allowing accurate identification during the testing process. As you move in and out of the test lab at the test center, you will be able to use your finger to authenticate yourself at the scanners located in the test center, limiting or eliminating the need for you to provide additional identification throughout the test day to test center staff.
Personal Information Collected as Part of the BIMS Program
The BIMS record contains a digitized representation of your fingerprint (the template), an image of your fingerprint, along with your name, address, telephone number (if you provided one), date of birth or age, identification document number, and a scanned copy of your identification document (such as your driver’s license), which may include your digitized photograph. The BIMS information is paired with registration information and information about your test session.
The Purposes and Uses for the Personal Information
The personal information collected under the BIMS program is used: (1) to administer the tests and verify your identity on an ongoing basis throughout the test day; (2) to protect your privacy by enabling you to leave for and return from authorized breaks without having to present identification documents repeatedly; (3) to identify and prevent testing fraud and maintain the integrity of the testing process by detecting and preventing test taking by unauthorized candidates; (4) to improve security of test centers by detecting and preventing unauthorized access of candidates to secure areas; and (5) as required by law.
Personal Information Disclosed to Third Parties
Your personal information (including your fingerprint template) may be provided: (1) to data processors, like Prometric, who process the data and who are bound by contracts to limit their use of the information to the purposes specified in this notice; and (2) to third parties if required by law or as necessary to complete a testing fraud investigation directly related to the relevant candidate(s).
Information Storage
The personal information (including your fingerprint image and template) collected using BIMS is retained on behalf of the USMLE program sponsors in a secure, centralized database in the United States on test day and for a maximum of an additional 48 hours after test day. Upon expiration of that time period all demographic information collected using BIMS and the fingerprint image and template are deleted. Although the U.S. and many other countries do not have comprehensive data protection laws, the USMLE sponsors and Prometric will treat your personal information such that it will receive appropriate protection through data transfer contracts and/or certification to the EU-US Safe Harbor Program.
Privacy and Information Security
Appropriate technical, physical and administrative safeguards have been implemented to help protect your personal information against unauthorized access or loss. Access to information collected under the BIMS program is limited to those employees or agents of the USMLE program sponsors who have a need to access it and who are bound by confidentiality agreements.
The USMLE program sponsors and Prometric are committed to protecting your privacy and will only use the personal information collected under the BIMS program for the purposes described in this Privacy Notice. Should you still have concerns about BIMS please contact your registration entity as detailed below, and we will try to accommodate your concerns.
Questions
You can contact your registration entity about the use of your personal information, including your biometric information at:
| NBME | ECFMG | FSMB |
| Examinee Support Services 3750 Market Street Philadelphia, PA 19104-3190 |
Applicant Information Services 3624 Market Street Philadelphia, PA 19104-2685 |
Department of Examination Services P.O. Box 619850 Dallas, TX 75261-9850 |
| Website: http://www.nbme.org | Website: http://www.ecfmg.org | Website: http://www.fsmb.org |
| Telephone: (215) 590-9700 Fax: (215) 590-9457 |
Telephone: (215) 386-5900 Fax: (215) 386-9196 |
Telephone: (817) 868-4041 Fax: (817) 868-4098 |
| Email: webmail@nbme.org | Email: info@ecfmg.org | Email: usmle@fsmb.org |
If you have questions about BIMS and how it works you can also contact Prometric at:
Anthony R. Scicchitano
Data Protection Officer
Prometric
1501South Clinton Street
Baltimore, MD 21224 USA
Telephone: 1-443-455-8493
E-Mail: anthony.scicchitano@prometric.com