Privacy & Security - Government

Ohio Revised Code 1347.15 Implementation

• House Bill 648 of the 127 th General Assembly of the State of Ohio
• Ohio Revised Code Chapter 1347: Personal Information Systems
• Governor's Management Directive - Accessing Confidential Personal Information Maintained by the State (Revised) April 6, 2009 (.pdf) (State of Ohio)
• ORC 1347.15 Implementation Plan Template (.doc) (State of Ohio)
• Preliminary Checklist for Applying "Confidential Personal Information" to Priority Systems (.pdf)
•  
• Ohio IT Bulletin ITB-2008.02, "Privacy Impact Assessments"
• Ohio IT Policy ITP-B.1, "Information Security Framework"
• Ohio IT Policy ITP-B.11, "Data Classification"
• Data Classification Resource Kit (State of Ohio)

General Privacy and Security Resources

• Statewide IT Security Policies and Guidance (State of Ohio )
• Executive Order 2007-13S: Improving State Agency Data Privacy and Security (.pdf) (State of Ohio )
• Model IT/Data Security Incident Management Guide (.doc) (State of Ohio)
• Agency IT Security Policy Compliance Report Template (.doc)
• Data Encryption and Securing Sensitive Data Bulletin (.pdf) (State of Ohio )
• Data Encryption and Cryptography Standard (.pdf) (State of Ohio)

Presentations

• SafeBoot Acquisition - FAQs (.pdf)

Answers to questions regarding state agency participation in the SafeBoot acquisition program, including who is eligible to participate, the contents of a SafeBoot license, and other license-related details.

• SafeBoot Seat License Overview (.pdf)

This document outlines the options available under the SafeBoot OMB License Bundle available through the OIT Master License Agreement.

• SafeBoot Product Guide (.pdf)

This document combines a SafeBoot fact sheet and product guide containing information relevant to the OIT SafeBoot acquisition.

• SafeBoot MLA Pricing (.pdf)

This document provides SafeBoot Product and Service Pricing according to the OIT Master Contract for Software Licensing.

• SafeBoot Implementation - FAQs (.pdf)

Answers to questions related to the implementation of SafeBoot on state-controlled devices and media, including how particular configurations may affect the use of encryption.

• SafeBoot Purchasing Program Narrative (.pdf)

This document provides an overview of the agreement between the State of Ohio and SafeBoot, and outlines the principal steps to participate in the program.

• SafeBoot Cooperative Purchasing Program - FAQs (.pdf)

Answers to questions related to how non-state government public entities may obtain SafeBoot through the Cooperative Purchasing Program.

• DAS Cooperative Purchasing Program Flyer (.pdf)

• Compendium of Federal Privacy Laws (Center for Democracy and Technology)
• U.S. Privacy and Civil Liberties Oversight Board

Communications Privacy

• National Do-Not-Call Registry
• Telephone Consumer Protection Act of 1991
• The Electronic Communications Privacy Act (1986)

Children's Privacy

• Children's Online Privacy Protection Act of 1998 (COPPA)

Financial Privacy

• Fair Credit Reporting Act (1970)
• Gramm-Leach-Bliley Act (1999)
• Right to Financial Privacy Act (1978)

Health Privacy

• Education Privacy FERPA
• Family Education Rights and Privacy Act (1974)
• Health Insurance Portability and Accountability Act of 1996 (HIPAA)
• Health Privacy Project

Government Privacy

• Census Confidentiality Statute of 1954
• Computer Security Act of 1987
• E-government Act of 2002
• Freedom of Information Act (1966)
• Privacy Act of 1974

Other Federal Privacy Laws

• Administrative Procedure Act
• Cable Communications Policy Act of 1984
• Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003
• Driver's Privacy Protection Act of 1994
• Employee Polygraph Protection Act of 1988
• Privacy Protection Act of 1980
• Video Privacy Protection Act of 1988

• Department of Homeland Security PIA
• Basics of the Privacy Impact Assessment (ppt) - (Dept. of the Interior)
• Privacy Impact Assessment Handbook (Information Commission Office - UK)
• Privacy Impact Assessment Template (Word) - (Dept. of the Interior)
• Federal E-Government Act of 2002 (Office of Management and Budget)
• Census Bureau PIA
• Security Exchange Commissions PIA & template documents
• Veteran's Association PIA Handbook

• Data Breach Notification Laws
• DHS Privacy Incident Handling Guidance
• Model IT/Data Security Incident Management Guide (.doc) (State of Ohio)
• Office of Management and Budget Recommendations for Identity Theft Related Data Breach Notification (.pdf)
• Recommended Practices on Notice of Security Breach Involving Personal Information (California Office of Privacy Protection) (.pdf)

• Data Classification Guidance (Educause)
• Procedures for Notification of Employee Wrongdoing and/or Suspected Illegal Activity (State of Ohio) (.pdf)
• Data Protection Technical Guidance: Determining what is personal data (ICO - UK)
• E-Government Act of 2002 including Title III - The Federal Information Security Management (FISMA) Act - The purpose of this Act is to enhance the management and promotion of electronic government services and processes. Title III of this act is the Federal Information Security Management Act of 2002. The E-Government Act permanently supersedes the Homeland Security Act in those instances where both Acts prescribe different amendments to the same provisions of the United States Code.
• Office of Management and Budget Guidance on FISMA - The subject of this memorandum is Reporting Instructions for the Federal Information Security Management Act and Updated Guidance on Quarterly IT Security Reporting. (.pdf)
• Homeland Security Presidential Directive/HSPD-7 - This directive establishes a national policy for Federal departments and agencies to identify and prioritize United States critical infrastructure and key resources and to protect them from terrorist attacks.
• National Strategy to Secure Cyberspace - This document outlines an initial framework for both organizing and prioritizing efforts to protect against disruptions to our critical information systems and reduce vulnerabilities to cyber threats. The Department of Homeland Security's National Cyber Security Division (NCSD) has been charged with coordinating the implementation of the strategy. (.pdf)
• Privacy Impact Assessment Handbook (Information Commission Office - UK)

• MS-ISAC Cyber Security Guides
• State Laws Related to Internet Privacy