Topic:"Compliance Legislation" in M10473

20.5 If a breach notified pursuant to Sections [20.4(a)](#page-127-0) cannot be corrected within the period required therein, the defaulting Party shall not be in breach or violation if it: (a) commences and diligently and continuously car...

AI summary This section outlines the procedures for addressing breaches and termination of an agreement, including conditions for non-breach if corrective actions are taken, and the process for notifying parties involved. It also specifies the methods and addresses for sending notices to Nova Scotia Power Incorporated and EfficiencyOne.

household. For the Green Heat program component, E1 tracks housing units whereas E1's Evaluation Consultant tracks measures installed. This number reflects E1's year-end 10 results for housing units. 2 11 The 20/22 DSM Plan expresses EPI p...

AI summary The text discusses discrepancies in participation metrics for the Green Heat program, noting that E1 tracks housing units while its Evaluation Consultant tracks installed measures. It also highlights differences in how the 20/22 DSM Plan and EPI count participation, with post-hoc estimates for housing units. Updates to AMH participation are tied to the 2020-2022 Compliance Filing tables.

Remediation Summary The following table outlines the status of each observation and PIO, organized by risk level as noted in our follow-up review. Please refer to Appendix A for the risk classification level criteria used for each observat...

AI summary The document provides a remediation summary outlining the status of various observations and PIOs, organized by risk level. Several high and moderate risk items have been remediated, with some requiring additional actions or resulting in new PIOs.

Moderate Partially remediated 3.6 Segregation of duties for website developers Moderate Remediated + new PIO 3.7 Compliance monitoring for agents Low Remediated + new PIO 3.8 Security of service account credentials with access to the corpo...

AI summary The document outlines various risk ratings and remediation statuses for different process improvement opportunities, focusing on segregation of duties, compliance monitoring, security of credentials, and redaction of personal information. Some issues are partially remediated, while others remain unremediated.

ology system management and protection PIO Remediated PIO-3 Alignment to upcoming privacy breach notification requirements PIO Remediated PIO-4 No consent withdrawal procedure PIO Not remediated PIO-5 Use of multiple ticketing systems with...

AI summary The document outlines various privacy information officer (PIO) issues, including alignment with privacy breach notification requirements, lack of consent withdrawal procedures, use of multiple ticketing systems, unapproved software, outdated documentation, and insufficient safeguards in the privacy policy.

Partially remediated PIO-9 Lack of specificity in safeguards in the privacy policy PIO Remediated © 2022 KPMG LLP, an Ontario limited liability partnership and a member firm of the KPMG global organization of independent member firms affil...

AI summary The document outlines a follow-up review of privacy policies, highlighting gaps and recommendations identified during a 2018 privacy assessment by KPMG, as well as residual risks associated with these gaps.

diately manner where access upon termination of was terminated two personnel. business days after departure. Management agrees with the new moderate gap and recommendations identified by KPMG. Moving forward EfficiencyOne will be conductin...

AI summary Management agrees with KPMG's recommendations regarding account and access control reviews, which will be conducted quarterly starting in Q2, 2022. The document also references the termination of access two business days after personnel departure.

Detailed follow-up review findings Residual Suggested ID # Original finding Original Finding Description Status Remaining gaps Recommendations risk level timeframe 3.4 Information security EfficiencyOne operates using a mix of formal and R...

AI summary EfficiencyOne's information security policies are a mix of formal and informal IT policies, which include a well-defined privacy policy but do not cover all domains of information security and are not consistently applied across the IT environment. The residual risk is medium, and recommendations include obtaining annual acknowledgments for the Privacy Policy.

Detailed follow-up review findings Residual Suggested ID # Original finding Original Finding Description Status Remaining gaps Recommendations risk level timeframe 3.6 Segregation of While EfficiencyOne controls the flow of changes to Reme...

AI summary The review identified a medium risk issue regarding the lack of segregation of duties and monitoring for developers with access to both production and non-production environments at EfficiencyOne. The finding was remediated, but recommendations include establishing a monthly change review as part of continual improvement efforts.

EfficiencyOne's websites and ensure that they followed the change management process. Management acknowledges KPMG's new PIO. EfficiencyOne is currently refining its existing change and approval process to include a retroactive review Mana...

AI summary EfficiencyOne is refining its change and approval process to include a retroactive review of website change evidence relative to what had been approved, following KPMG's new PIO appointment.

Detailed follow-up review findings Residual Suggested ID # Original finding Original Finding Description Status Remaining gaps Recommendations risk level timeframe 3.7 Compliance While EfficiencyOne captures the required consent Remediated...

AI summary EfficiencyOne has implemented measures to ensure compliance with privacy regulations, including obtaining consent and requiring agents to follow PIPEDA. However, there are gaps in routine assurance and monitoring of agents' compliance, which should be addressed through continual improvement efforts.

surance of or monitor the their understanding and EfficiencyOne should compliance of agents against these agreed-to commitment to consider promoting contractual requirements for the handling and compliance with privacy best practices to se...

AI summary The text discusses the need for EfficiencyOne to ensure compliance of agents with contractual requirements related to the handling and security of personal information (PI), including adherence to PIPEDA. It notes that some agent websites, such as those related to energy assessments, did not include privacy best practices or proper redirections.

Detailed follow-up review findings Residual Suggested ID # Original finding Original Finding Description Status Remaining gaps Recommendations risk level timeframe PIO-1 Potential for While we have not identified a specific instance Not re...

AI summary The review identifies a potential risk that EfficiencyOne may retain personal information (PI) longer than necessary, particularly if a data subject withdraws consent. There is no formal records retention and destruction schedule in place, and recommendations include establishing such a schedule and consulting with Nova Scotia Power.

handle data subject Spam Legislation ‘CASL’ form and the data subject requests to be forgotten. is no longer a direct consumer of EfficiencyOne services. For each applicable data subject’s case, EfficiencyOne should validate that at least...

AI summary EfficiencyOne is addressing data subject requests under CASL, particularly regarding the deletion of personal information. The company is consulting with legal counsel to determine appropriate records retention and destruction practices, ensuring compliance with data subject rights.

the low-income sector. In addition, NSTAR Gas and EGMA shall file all Annual Reports and Term Reports (and related documents) for this Three-Year Plans term, both on an individual and an aggregate basis. The Department will review the perf...

AI summary The text outlines requirements for NSTAR Gas and EGMA to file reports and update screening models as part of their compliance with the Three-Year Plans. It also discusses the Program Administrators' proposal to include energy savings from a Codes and Standards Compliance and Technical Support initiative in their Three-Year Plans.

ances approximately 20% of the market share, the majority of homes in Alaska are built to this standard. In addition, research has found that about 68% of new residential construction adheres to BEES. Last reviewed: September 2020 ","Alask...

AI summary Alaska's Building Energy Efficiency Standards (BEES) are adopted by 20% of the market, with 68% of new residential construction complying. The state lacks a statewide commercial building code, but public facilities must follow AS44.42020 standards. Training programs by the Alaska Housing Finance Corporation support code compliance, though no utility involvement guidelines exist.

Last Reviewed: May 2021 "," Baseline & Updated Compliance Studies: Colorado is undergoing a residential code compliance study now as part of a DOE-funded grant that was awarded to NASEO. The field testing has been completed and we are awai...

AI summary Colorado has conducted multiple studies on residential and commercial energy code compliance, finding high residential compliance but low commercial compliance. Xcel Energy has supported code trainings and plans to study energy efficiency impacts. The Colorado Energy Code Compliance Collaborative plays a key role in promoting compliance.

6. SAFETY - 6.1 EfficiencyOne shall at all times be responsible for safety and loss management in the supply or performance of the EECA. - 6.2 EfficiencyOne shall ensure that all employees, Subcontractors, agents and representatives of Eff...

AI summary EfficiencyOne is mandated to manage safety and loss in the execution of the Energy Efficiency and Conservation Agreement (EECA). They must ensure compliance with all relevant health, safety, and environmental regulations at all levels of government, as well as internal rules established by EfficiencyOne.

5. CONCLUSION - As part of its Compliance Filing, E1 has provided a redline and clean version of Appendix A inclusive of all - attachments for ease of future reference. Updates from the version filed on March 11, 2022 were made to - Append...

AI summary EfficiencyOne has submitted a Compliance Filing and Supply Agreement in response to the NSUARB's September 6, 2022 decision, including updated versions of Appendix A and its attachments. EfficiencyOne requests approval of the filing.

6. SAFETY - 6.1 EfficiencyOne shall at all times be responsible for safety and loss management in the supply or performance of the EECA. - 6.2 EfficiencyOne shall ensure that all employees, Subcontractors, agents and representatives of Eff...

AI summary EfficiencyOne is responsible for safety and loss management under the EECA and must ensure compliance with all federal, provincial, and municipal health, safety, and environmental regulations.

9. EFFICIENCYONE'S COVENANTS - 9.1 EfficiencyOne warrants, covenants and agrees with NSPI that: - (a) it has all requisite capacity and authority to execute, deliver and perform its obligations under this Agreement; - (b) this Agreement ha...

AI summary EfficiencyOne's covenants with NSPI include legal enforceability of the agreement, compliance with laws, use of licensed personnel, and notification obligations to the UARB. The terms emphasize adherence to the EECA, proper performance of work, and responsibility for subcontractors.

- Within their closing submissions, NS Power 1 , the Consumer Advocate 2 , the Affordable Energy Coalition 3 , - 3 the Municipal Electric Utilities 4 , and the Small Business Advocate 5 have all confirmed and/or reiterated - 4 their genera...

AI summary The document outlines submissions from various stakeholders regarding the 2023-2025 DSM Settlement Plan, with general support from NS Power, the Consumer Advocate, and others. The Industrial Group has made specific requests to the Board regarding E1's compliance filing, including payback information, justification for measures failing the TRC test, and the use of current Statistics Canada data. E1 opposes these requests.