Department of Corrections and Rehabilitation - Operations Manual

Chapter 4 – Information Technology

Article 6 – Data Sharing and Exchange Policy

Revised September 24, 2026

(1) California Constitution Privacy Clause, Article 1, section 1.
(2) CACorrectional Administrators Civ. Code, §§ 56 et seq., and 1798 et seq.
(3) Federal Health Insurance Portability and Accountability Act and its implementing regulations, 45 C.F.R. § 164.500 et seq.
(4) DOMDepartment Operations Manual, Chapter 3, Article 22.
(5) Federal Information Processing Standard, FIPS 199.
(6) GCGovernment Code, § 11549.3.
(7) NIST SP 800-53, Access Control, AC-20, AC-21.
(8) NIST SP 800-53, Audit and Accountability, AU-13.
(9) NIST SP 800-53, Assessment, Authorization, and Monitoring, CACorrectional Administrators-3, CACorrectional Administrators-9.
(10) NIST SP 800-53, Planning, PL-4.
(11) NIST SP 800-53, Personally Identifiable Information Processing and Transparency, PT-1, PT-2, PT-7.
(12) NIST SP 800-53, Risk Assessment, RA-2, RA-3.
(13) NIST SP 800-53, System and Information Integrity, SI-12, SI-18.
(14) Penal Code, section 832.7, subdivision (a).
(15) State Administrative Manual, §§ 5350.1, 5310.7, and 5305.8.