P.R. Laws tit. 10, § 4051
For the purposes of this chapter:
(a) Personal information file. — Refers to a file containing at least the name or first initial and the surname of a person, together with any of the following data so that an association may be established between certain information with another and in which the information is legible enough so that in order to access it there is no need to use a special cryptographic code.
(1) Social security number.
(2) Driver’s license number, voter’s identification or other official identification.
(3) Bank or financial account numbers of any type with or without passwords or access code that may have been assigned.
(4) Names of users and passwords or access codes to public or private information systems.
(5) Medical information protected by the HIPAA.
(6) Tax information.
(7) Work-related evaluations.
Neither the mailing nor the residential address is included in the protected information or information that is a public document and that is available to the citizens in general.
(b) Department. — Refers to the Department of Consumer Affairs.
(c) Violation of the security system. — Means any situation in which it is detected that access has been permitted to unauthorized persons or entities to the data files so that the security, confidentiality or integrity of the information in the data bank has been compromised; or when normally authorized persons or entities have had access and it is known or there is reasonable suspicion that they have violated the professional confidentiality or obtained authorization under false representation with the intention of making illegal use of the information. This includes both access to the data banks through the system and physical access to the recording media that contain the same and any removal or undue retrieval of said recordings.
(d) Entity. — Means every agency, board, body, examining board, corporation, public corporation, committee, independent office, division, administration, bureau, department, authority, official, instrumentality or administrative organism of the three branches of the Government; every corporation, partnership, association, private company or organization authorized to do business or operate in the Commonwealth of Puerto Rico; as well as every public or private educational institution, regardless of the level of education offered by it.
(e) Citizen’s Advocate. — Refers to the Citizen’s Advocate Office.
History —Sept. 7, 2005, No. 111, § 2; June 19, 2008, No. 97, § 1.