Why must state agencies submit their notices to the California Office of Information Security and Privacy Protection (OISPP) for review and approval before they are released to affected individuals?
In order to be effective and helpful to individuals placed in jeopardy by a breach, the notice must contain the appropriate elements given the facts involved. For example, a notice that advises an individual to place a fraud alert on their credit files when only limited medical information, such as a treatment diagnosis were involved, and not their social security or driver’s license number will do little to help the individual mitigate their risk in this situation.
Related Questions
- Why must state agencies submit their notices to the California Office of Information Security and Privacy Protection (OISPP) for review and approval before they are released to affected individuals?
- When are agencies required to submit the designation of an Information Security Officer (ISO) to the California Office of Information Security (OIS)?
- Is Office Depot selling to State of California agencies?
