Conduct income verification services for Rhode Island residents and property owners interested in owning a residential solar photovoltaic (“PV”) project (the “System Owners”), in order to qualify their eligibility for the solar incentives under the Rhode Island Solar for All (“SFA”) program. The selected Proposer (the “Proposer”) will be responsible for receiving application forms for each interested System Owner and determine eligibility in the available programs. TASK 1: Personally Identifiable Information (PII) Handling and Data Security Requirements The Proposer must implement and maintain a comprehensive data protection program that includes: 1. Data Collection Minimization: Collect only the minimum necessary PII needed to verify eligibility 2. Encryption and Transmission Controls: All PII must be encrypted in transit and at rest using industry-standard algorithms (e.g., AES-256, TLS 1.2+). Public-facing forms must utilize HTTPS. 3. Access Controls and Monitoring: a. Limit access to PII to only those personnel directly involved in verification processing.
