Privacy Information for State Government

Protecting Privacy in State Government, Basic Training for State Employees

• PowerPoint Presentation (.ppt, 1344k)
• Self-Training Manual (.doc, 852k)
• Guidelines for Self-Training Manual (.pdf, 94k)

Data Classification and Privacy Inventory
These materials were provided to departmental Information Security Officers and others at workshops conducted in November 2005.

• Training-PowerPoint Presentation (.ppt, 605k)
• Privacy Inventory Worksheet (.xls, 24k)
• Privacy Inventory Instructions (.pdf, 50k)

Data Inventory and Classification Project Resources
These materials are provided as an example of how one agency approached meeting the state records inventory and data classification requirements through an enterprise wide data inventory and classification effort. The agency expanded upon the latter material for a more comprehensive approach. These materials could be leveraged to meet your particular business needs and assist you with achieving compliance.

 

Information on Security Breach Notification

• Security Incident Notification Steps - State Information Security Office
• Breach Response Call Center FAQs (.doc, 49k)
• Security Breach Notice Recommended Practices (including Sample Notices) (.pdf, 226k)
• Security Breach First Steps (One-Page Notice for Breaches Involving Social Security Numbers Only)
  • English (.pdf, 48k)
  • Spanish (.pdf, 52k

California Office of Privacy Protection Recommended Practices

• Social Security Number Confidentiality (.pdf, 68k)
• Security Breach Notice (.pdf, 98k)
• Comments on the Model Policy on Access to Court Records of the Justice Management Institute and the National Center for State Courts - April 30, 2002 (.pdf, 148k)
• 
  State agencies are encouraged to add a link to consumer information on secure computing to every Web page and online form that collects personal information. Use this graphic icon as a button to make the link conspicuous, and link to the URL for new Secure Computing information.

---

The California Office of Information Security (Office) web site contains links to other sites that are not owned or controlled by us. The information provided at these sites does not reflect the views of this Office or indicate an endorsement of a particular company or product. Please be aware that our Office is not responsible for the security and privacy practices of such other sites.