Department of Corrections and Rehabilitation - Operations Manual

Chapter 4 – Information Technology

Article 45 – Information Security

Revised May 20, 2026

Using personally-owned devices to access departmental information resources may jeopardize the integrity and security of CDCRCalifornia Department of Corrections and Rehabilitation’s information resources. The following provisions shall be followed:
- Personally-owned electronic devices shall not connect to, transfer data to or from, or be used to copy data to or from the CDCRCalifornia Department of Corrections and Rehabilitation network;
- Personally-owned smartphones or tablets, such as Android or iPhone devices, shall not connect to, transfer data to or from, or be used to copy data to or from the CDCRCalifornia Department of Corrections and Rehabilitation network;
- CDCRCalifornia Department of Corrections and Rehabilitation electronic-mail (e-mail) shall not be setup for delivery or used on any personally-owned smartphone or electronic device;
- Personally-owned USB memory “sticks,” “cards,” or “external drives,” shall not be used to copy, forward, or transfer CDCRCalifornia Department of Corrections and Rehabilitation data from CDCRCalifornia Department of Corrections and Rehabilitation local drives, networks, or e-mail systems.
Exemptions to these provisions shall require approval from the department personnel’s hiring authority.