West Virginia Executive Branch Privacy Policy: Minimum Necessary and Limited Use, Policy No: WVEB-P104

Details

Type: Policy
Agency: Risk And Insurance Management
CSR Number: none supplied
Effective Date: August 1, 2009

Summary

This policy requires a department to limit the collection, and disclosure of Personally Identifiable Information (PII) to its legal authority. Additionally, it lays out a standard that no PII should be collected or disclosed that are beyond what is reasonably needed to accomplish a legitimate departmental objective, except where law or public policy directs otherwise. It requires that each department determine: 1) what PII it collects and to develop appropriate collection and disclosure procedures; and 2) that all new processes that collect or disclose PII be evaluated to ensure compliance with this policy.
West Virginia Executive Branch Privacy policy and procedure is not based on any one federal or state privacy law. This privacy policy/procedure materially addresses the various requirements of the majority of the laws and regulations with which the West Virginia Executive Branch must comply and serves as a foundation or baseline. There are twenty-four related federal laws and twenty-eight state laws that govern various aspects of the West Virginia Executive Branch privacy program.
Summaries of West Virginia’s Privacy Requirements may be found at http://privacy.wv.gov/SiteCollectionDocuments/Legal/2016%20Privacy%20Requirements%20FINAL.pdf
This policy is not more stringent than similar federal law.

Submitter Details

Name: Sue Haga
Email: sue.c.haga@wv.gov
Phone: 304-766-2646

Uploaded Files

No files uploaded.