Int 0626-2015
| * | Ben Kallos | | | Personal information security. | Introduction | This bill would require each city agency that collects personal information to develop, implement and maintain a comprehensive security program to protect that information. As part of the comprehensive security program agencies would need to develop safeguards for protecting personal information, including ongoing employee training, restrictions on physical access to information, disciplinary measures for violation of security program rules, regular monitoring of the security program operations, and periodic review of the security program components.
If the security program is electronic, the program would be required to include secure authentication protocols, unique identifier technologies, control of data security passwords, firewall security protection, and encryption of all transmitted personal information on public or wireless networks, portable media, or shared with third-party service providers. | Hearing Held by Committee | |
Action details
|
Not available
|
Int 0626-2015
| * | Ben Kallos | | | Personal information security. | Introduction | This bill would require each city agency that collects personal information to develop, implement and maintain a comprehensive security program to protect that information. As part of the comprehensive security program agencies would need to develop safeguards for protecting personal information, including ongoing employee training, restrictions on physical access to information, disciplinary measures for violation of security program rules, regular monitoring of the security program operations, and periodic review of the security program components.
If the security program is electronic, the program would be required to include secure authentication protocols, unique identifier technologies, control of data security passwords, firewall security protection, and encryption of all transmitted personal information on public or wireless networks, portable media, or shared with third-party service providers. | Laid Over by Committee | |
Action details
|
Not available
|
Int 0627-2015
| * | Ben Kallos | | | Securing personal information privacy. | Introduction | This bill would require each city agency that collects personal information to develop a system to protect the privacy of that information. The system of protection would include appropriate administrative, technical and physical safeguards to ensure the confidentiality of personal records and would also require the destruction of those records once the purpose of collecting that information is achieved. | Hearing Held by Committee | |
Action details
|
Not available
|
Int 0627-2015
| * | Ben Kallos | | | Securing personal information privacy. | Introduction | This bill would require each city agency that collects personal information to develop a system to protect the privacy of that information. The system of protection would include appropriate administrative, technical and physical safeguards to ensure the confidentiality of personal records and would also require the destruction of those records once the purpose of collecting that information is achieved. | Laid Over by Committee | |
Action details
|
Not available
|
Int 1052-2016
| * | James Vacca | | | Agency disposal of electronics. | Introduction | This bill would require any agency disposing of electronic equipment that contains a data storage device, including printers, copiers and computers, to fully erase such device before its disposal. Disposal includes transfers of equipment between agencies when such equipment contains sensitive or confidential information that is not relevant to the work of the agency receiving the equipment. City agencies, and third party contractors obligated to dispose of such equipment, must also certify that they have complied with the law. | Hearing Held by Committee | |
Action details
|
Not available
|
Int 1052-2016
| * | James Vacca | | | Agency disposal of electronics. | Introduction | This bill would require any agency disposing of electronic equipment that contains a data storage device, including printers, copiers and computers, to fully erase such device before its disposal. Disposal includes transfers of equipment between agencies when such equipment contains sensitive or confidential information that is not relevant to the work of the agency receiving the equipment. City agencies, and third party contractors obligated to dispose of such equipment, must also certify that they have complied with the law. | Laid Over by Committee | |
Action details
|
Not available
|