Chapter 1 – General Administration

13030.9 Responsibility: All Employees

• Employees responsible for the creation, use, maintenance, amendment, dissemination, and/or destruction of records containing any personal information shall take all necessary precautions to ensure that proper administrative, technical, and physical safeguards are established and followed in order to protect the confidentiality of those records and to preclude disclosure of personal information to unauthorized persons.

• Shall

  • All CDCRCalifornia Department of Corrections and Rehabilitation employees who collect, use, maintain, amend, disseminate, and/or destroy personal information shall:

    • Make every reasonable effort to respond promptly to inquiries and requests by persons desiring to receive or review personal information.

    • Assist persons who are seeking personal information to make their inquiry specific and descriptive enough to facilitate locating the records requested.

    • Respond, in a courteous and business like manner, to inquiries from persons seeking to review, obtain copies of, amend, correct, or dispute personal information kept by CDCRCalifornia Department of Corrections and Rehabilitation.

• Shall Not

  • CDCRCalifornia Department of Corrections and Rehabilitation employees who collect, use, maintain, amend, disseminate, and/or destroy personal information shall not:

    • Require individuals to disclose personal information which is not necessary and relevant to the lawful state function for which the employee is responsible.

    • Improperly disclose personal information relating to any individual to any unauthorized person. The improper disclosure of personal information is cause for an adverse action, and it may subject the employee and CDCRCalifornia Department of Corrections and Rehabilitation to legal action (See DOMDepartment Operations Manual 13030.33 for further information).

    • Seek or use personal information relating to others for any purpose other than the lawful purpose for which it is collected. The intentional violation of this requirement is cause for an adverse action, and it may subject the employee and CDCRCalifornia Department of Corrections and Rehabilitation to legal action (See DOMDepartment Operations Manual 13030.33 for further information).