nd.gov - The Official Portal for North Dakota State Government
North Dakota: Legendary. Follow the trail of legends

E-Services Privacy

Policy Code: 
EGT001-04.2
Effective Date: 
March 15, 2004
Revision Number: 
2
Revision Date: 
November 3, 2004

Purpose

Privacy issues are of concern for many people who are asked to provide personal information through e-services. Privacy standards may ease the concern of the customer and hopefully encourage the use of the services.

Standard

  1. All e-services accepting personally identifiable information shall provide privacy policy information. 
  2. Privacy policies shall state:
    1. What and why personally identifiable information is collected.
    2. How the information will be used and under what circumstances it will be released, or if applicable the specific laws providing that the information is confidential.
    3. Choices available to the individual for reviewing and correcting customer submitted information.
    4. Contact information.
    5. If social security numbers are collected, notification as required in the Privacy Act of 1974 must be given.
    6. Reference to a security policy.
    7. The web pages/applications or specific type of information/service areas covered by this policy.
    8. If and how cookies are used.

Policy

Inform customers of the agencies’ intentions regarding the privacy of their personal information.

Applicability

This standard applies to all executive branch state agencies including the University Systems Office but excluding other higher education institutions, i.e. campuses and agricultural and research centers.

Definition

Personally identifiable information
Any recorded information that uniquely identifies the person, such as, but not limited to, name, account number, social security number, user ID, PIN number, e-mail address, or biometric data.
Data that can be tied to a device or residence owned or used by an individual, such as, but not limited to, the individual's telephone number, mailing address or computer IP address.
E-Services:
Services provided electronically via interactive media. For example but not limited to:
  • Interactive Voice Response (IVR)
  • World Wide Web
Cookies
Cookies are text files that are transmitted between your browser and the web server. There are two types of cookies:
  • In memory cookies – deleted on closing browser
  • Disk cookies are stored until they expire or are deleted.

Guidance

  1. Best practices - E-Service Privacy Best Practices
  2. An example of a privacy policy
  3. The text of the Privacy Act of 1974
  4. Guidelines from the Online Privacy Alliance

Non-Compliance

Non-compliance with this standard shall be reported to the Office of the State Auditor.

Version Control: 
This standard supersedes EGT001-04.1.

Drafted By

EA Domain Team for E-Government

 

What Our Customers Are Saying

Thank you for the prompt response.

Bank of North Dakota
April 16, 2013
 
 

Copyright © 2013 North Dakota Information Technology Department - ITD
Download Adobe Reader to view, print and collaborate on PDF files.