N.J. Admin. Code § 10A:31-6.7

Current through Register Vol. 56, No. 21, November 4, 2024

Section 10A:31-6.7 - Identity theft prevention and reporting

(a) Pursuant to the Identity Theft Prevention Act at 56:11-44 et seq. and definitions relative to security of personal information at 56:8-161, in order to prevent identity theft, adult county correctional facility staff shall be responsible for safeguarding "personal information" as this term is defined in 10A:31-1.3. Additionally, adult county correctional facility staff shall be responsible for taking reasonable steps to ensure that all records containing personal information are not lost, stolen, inappropriately accessed or released and for complying with any related internal management procedures.

(b) In the event that an incident which may constitute a breach of security is suspected or discovered, the staff member discovering the suspected breach shall report it to their immediate supervisor. Supervisory/administrative staff shall ensure that any such incident is reported through the administrative chain of command to the Administrator. For purposes of rules regarding identity theft, "breach of security" means unauthorized access to electronic files, media or data containing personal information that compromises the security, confidentiality or integrity of personal information when access to the personal information has not been secured by encryption or by any other method or technology that renders the personal information unreadable or unusable. Good faith acquisition of personal information by an employee or agent of the adult county correctional facility for a legitimate business purpose is not a breach of security, provided that the personal information is not used for a purpose unrelated to business or subject to further unauthorized disclosure.

(c) All reports related to identity theft shall be provided to the Administrator or designee in accordance with internal management procedures of the adult county correctional facility. The Administrator or designee shall report the incident of identity theft to the governing body of the county or to the County Board of Freeholders.

N.J. Admin. Code § 10A:31-6.7

Repealed by R.2006 d.59, effective 2/6/2006.
See: 37 N.J.R. 3201(a), 38 N.J.R. 995(a).
Section was "Limitation on inmate and parolee records."
New Rule, R.2007 d.64, effective 2/20/2007.
See: 38 N.J.R. 4622(b), 39 N.J.R. 652(b).
Section was "Reserved".