Item 3: Ratification of Unanimous IGR Actions and Action on Non-Unanimous IGR Actions

Home Browse Search

Comments: This is a privacy-protection bill that would require public bodies to remove certain personal information from digital storage devices before disposing of them. Sounds like a good idea in principle, but the estimated cost, per Pam Berrian, is excessive, especially because the City has already implemented similar privacy protections. Contact Respondent Dept Updated Priority Recommendation Pam Berrian CS-ISD 2/2/2011 Pri 1 Oppose Oppose Unless Amended Comments: ; Substantial Fiscal Impact (est at $400k to City of Eugene). While trying to draw attention to security issues, the bill is flawed. Why? It would require public bodies to OWN photocopiers and scanners that contain personal information, leaving agencies that rent them [like Eugene & probably most public bodies] with a HUGE fiscal impact because we would have to BUY instead of lease. Changing "owned" to "owned, leased, rented or otherwise in the lawful possession of a public body" is necessary. As note, the City already has a policy which addresses this and goes further in meeting DOD standards [DOD policy available upon request]. The City of Eugene policy includes all owned and leased copiers and scanners in ‘electronic systems’ definition: "Electronic Records: City employees should only store personal information on the City’s electronic systems supported by the Information Services Division (ISD). Do not store personal information on laptops, USB thumb drives, cod/DVD, etc. Before disposal, all electronic media containing personal information must be destroyed or erased so that the information cannot be read. For additional information regarding disposal of information stored in the City’s electronic systems, refer to the City’s IT Policy 4.4." If the City cannot LEASE photo copier and scanners that might contain personal information used in the regular course of City business but must BUY them, the cost would be substantial. Unless federally pre-empted, a simpler amendment would be to require manufactures or dealers that sell copiers in the State of Oregon to provide Data Over-write Security Software as a standard feature in these devices and avoid the burden on all public bodies and businesses throughout the state. In fact, the requirement is already showing up in State purchasing contracts. Note: Estimated impact statewide if all copiers and scanners potentially containing personal information must be OWNED (instead of leased): $50M. HB 2941 Relating Clause: Relating to juveniles. Title: Creates defense to prostitution under certain circumstances for person under 18 years of age. Sponsored by: By Representative GELSER; Representatives BERGER, BREWER, DEMBROW, DOHERTY, J SMITH, SPRENGER URL: http://www.leg.state.or.us/11reg/measpdf/hb2900.dir/hb2941.intro.pdf 3