(a) The contractor must protect the confidentiality of personally identifiable information at collection, storage, disclosure, and destruction stages.(b) One official for each contractor shall assume responsibility for ensuring the confidentiality of any personally identifiable information.(c) All persons collecting or using personally identifiable information must receive training or instruction regarding the state's policies and procedures.(d) Each contractor must maintain, for public inspection, a current listing of the names and positions of those employees within the agency who may have access to personally identifiable information.