honoluluadvertiser.com

Sponsored by:

Comment, blog & share photos

Log in | Become a member
The Honolulu Advertiser
Posted on: Monday, December 31, 2007

Hawaii task force urges steps to fight ID theft

Advertiser Staff

To reduce the risk of identity theft, dozens of government agencies should reduce use of personal information and create new safeguards to protect data such as Social Security numbers, a report by the Hawai'i Identity Theft Task Force says.

The 23-member panel surveyed all state and county agencies over the past year, finding "an absence of comprehensive administrative, technical and physical safeguards covering privacy and security of personal information."

Eighty-five state and county agencies maintain 20 million to 30 million records containing personal information, according to the report.

Training on handling and security "often is, at best, information," and only one-fourth of the 85 agencies had mandatory employee training on the appropriate use and disclosure of personal information, the task force found.

"Nearly all of the agencies surveyed reported transmitting information outside the organization," according to the report. "Just over one-half have specific procedures for concealing or redacting personal information on paper documents, and less than one-half reported technical safeguards in place for electronic transmission of information or storage of personal information on laptop computers or removable storage devices."

The task force recommended that government agencies:

  • Require annual report on systems that use personal information;

  • Limit the personal information in agency records;

  • Reduce the use of Social Security numbers;

  • Require state and county agencies to assign policy and oversight responsibilities;

  • Issue guidance on use of personal information in personnel functions;

  • Require agencies to use third-party information-use agreements;

  • Issue data-breach guidance to agencies;

  • Require agencies to implement a breach notification policy;

  • Recommend to the Legislature initiatives to mitigate impact of identity theft on individuals;

  • Develop concrete guidance and best practices;

  • Issue portable storage and communication devices guidance; and

  • Revise the effective date of the state's Social Security protection law to July 1, 2009.

    Make a difference. Donate to The Advertiser Christmas Fund.