18-14 Enact Chp. 148 Personal Information Systems

Home Browse Search

(a) Eliminate personal information from the information system which is no longer timely, and which may be eliminated in accordance with all other applicable law; (b) Determine whether all personal information maintained is necessary and relevant to the functions that his or her office is required or authorized by law to perform. In the event it is found that information is being maintained which is not legally required or authorized, the city official shall: (1) Eliminate that information from the system, in compliance with the re- quirements of state law; or (2) Propose legislation to the Mayor which would authorize or require such information to be kept. 148.08 DUTIES IN THE OPERATION OF PERSONAL INFORMATION SYSTEMS. Every personal information system officer shall: (a) Inform a person asked to supply information for a system whether he or she is legally required to supply such information; (b) Maintain personal information in the system with such accuracy, relevance, timeliness and completeness as is necessary to assure fairness in any deter- mination made with respect to the person on the basis of the information; (c) Take reasonable precautions to protect personal information in the system from any anticipated threat or hazard to the security of the system; (d) Collect only personal information that is necessary and relevant to the func- tions that he or she is required or authorized by law to perform; and (e) Follow established city policy with respect to the immediate reporting of any breaches, losses or unauthorized exposure of personal information con- sisting of Social Security numbers, credit card information, banking infor- mation, driver's license numbers or state identification card numbers. 148.09 USE OF PERSONAL INFORMATION. Personal information shall only be used in a manner that is consistent with the lawful proposes of the personal information system from which it comes. 148.10 PROHIBITION AGAINST RETALIATORY ACTIONS. No City employee shall initiate or otherwise contribute to any disciplinary or other punitive action against any individual who brings to the attention of ap- propriate authorities, the press or any other member of the public, evidence of unauthorized use of personal information contained in the system. 148.11 RIGHTS OF INSPECTION. (a) Every personal information system officer shall, upon the request of any properly identified person: