Personally Identifiable Information - Revision history

BReady72 at 22:49, 14 August 2018

2018-08-14T22:49:06Z

← Older revision		Revision as of 18:49, 14 August 2018
Line 13:		Line 13:
	# Ensure that all personnel within their area of responsibility understand the need to protect PII.		# Ensure that all personnel within their area of responsibility understand the need to protect PII.
	==== b. Members ====		==== b. Members ====
	# Protect PII that has come into their possession during the normal conduct of CAP business IAW paragraph 3b below.		Protect PII that has come into their possession during the normal conduct of CAP business IAW paragraph 3b below.

	=== 3. Protection ===		=== 3. Protection ===

BReady72 at 22:48, 14 August 2018

2018-08-14T22:48:00Z

← Older revision		Revision as of 18:48, 14 August 2018
Line 27:		Line 27:

	=== 3. Disposal ===		=== 3. Disposal ===
	==== a. Disposal methods are considered adequate if the personal data is rendered unrecognizable or beyond reconstruction.		==== Disposal methods are considered adequate if the personal data is rendered unrecognizable or beyond reconstruction.
	==== a. Examples of disposal methods for paper records include, but are not limited to tearing, burning, shredding, or mutilation. ====		==== a. Examples of disposal methods for paper records include, but are not limited to tearing, burning, shredding, or mutilation. ====
	==== b. Examples of disposal methods for electronic records and media include, but are not limited to, overwriting, degaussing, disintegration, pulverization, burning, shredding or sanding. Just deleting electronic files containing PII is not sufficient. ====		==== b. Examples of disposal methods for electronic records and media include, but are not limited to, overwriting, degaussing, disintegration, pulverization, burning, shredding or sanding. Just deleting electronic files containing PII is not sufficient. ====

	=== 5. What to do in the case of a Breach. ===		=== 5. What to do in the case of a Breach. ===
	If a CAP member becomes aware that his/her or another member’s PII may have been released, that member will notify his/her commander as soon as feasible. The commander is responsible for ensuring that the member(s) whose information may have been released or disclosed is notified of that release of information, to include the specific PII that may have been released. If a single incident results in the release or disclosure of PII of 10 or more members, the commander will notify the National Headquarters General Counsel’s office (NHQ/GC) of the name and CAPID of the member(s) whose information may have been released, with an information copy of the notification to the group, wing and region commander (as appropriate). Individual wings need to consult with their legal officers to assure compliance with state standards, if any.		==== If a CAP member becomes aware that his/her or another member’s PII may have been released, that member will notify his/her commander as soon as feasible. The commander is responsible for ensuring that the member(s) whose information may have been released or disclosed is notified of that release of information, to include the specific PII that may have been released. If a single incident results in the release or disclosure of PII of 10 or more members, the commander will notify the National Headquarters General Counsel’s office (NHQ/GC) of the name and CAPID of the member(s) whose information may have been released, with an information copy of the notification to the group, wing and region commander (as appropriate). Individual wings need to consult with their legal officers to assure compliance with state standards, if any. ====

BReady72 at 22:47, 14 August 2018

2018-08-14T22:47:09Z

← Older revision		Revision as of 18:47, 14 August 2018
Line 30:		Line 30:
	==== a. Examples of disposal methods for paper records include, but are not limited to tearing, burning, shredding, or mutilation. ====		==== a. Examples of disposal methods for paper records include, but are not limited to tearing, burning, shredding, or mutilation. ====
	==== b. Examples of disposal methods for electronic records and media include, but are not limited to, overwriting, degaussing, disintegration, pulverization, burning, shredding or sanding. Just deleting electronic files containing PII is not sufficient. ====		==== b. Examples of disposal methods for electronic records and media include, but are not limited to, overwriting, degaussing, disintegration, pulverization, burning, shredding or sanding. Just deleting electronic files containing PII is not sufficient. ====

			=== 5. What to do in the case of a Breach. ===
			If a CAP member becomes aware that his/her or another member’s PII may have been released, that member will notify his/her commander as soon as feasible. The commander is responsible for ensuring that the member(s) whose information may have been released or disclosed is notified of that release of information, to include the specific PII that may have been released. If a single incident results in the release or disclosure of PII of 10 or more members, the commander will notify the National Headquarters General Counsel’s office (NHQ/GC) of the name and CAPID of the member(s) whose information may have been released, with an information copy of the notification to the group, wing and region commander (as appropriate). Individual wings need to consult with their legal officers to assure compliance with state standards, if any.

BReady72 at 22:45, 14 August 2018

2018-08-14T22:45:55Z

← Older revision		Revision as of 18:45, 14 August 2018
Line 5:		Line 5:
	This regulation defines rules for protecting Personally Identifiable Information (PII), collected, generated, or maintained by Civil Air Patrol (CAP), from unauthorized disclosure and emphasizes the role of CAP users in ensuring that the appropriate physical and technical safeguards are in place to protect all CAP systems (both hard copy and electronic) that contain PII. This regulation applies to all CAP members.		This regulation defines rules for protecting Personally Identifiable Information (PII), collected, generated, or maintained by Civil Air Patrol (CAP), from unauthorized disclosure and emphasizes the role of CAP users in ensuring that the appropriate physical and technical safeguards are in place to protect all CAP systems (both hard copy and electronic) that contain PII. This regulation applies to all CAP members.

	=== General ===		=== 1. General ===
	Personally identifiable information (PII) is CAP confidential information about an individual that can be used to distinguish or trace that individual’s identity. Examples of PII include, but are not limited to, social security number; age; marital status; race; date and place of birth; telephone numbers; other demographic, medical history, personal, medical and financial information. Unauthorized access to the PII of members/employees must be prevented to the maximum extent possible. PII shall only be made available to those individuals who have a specific need to have such information and shall be provided for official CAP business only.		Personally identifiable information (PII) is CAP confidential information about an individual that can be used to distinguish or trace that individual’s identity. Examples of PII include, but are not limited to, social security number; age; marital status; race; date and place of birth; telephone numbers; other demographic, medical history, personal, medical and financial information. Unauthorized access to the PII of members/employees must be prevented to the maximum extent possible. PII shall only be made available to those individuals who have a specific need to have such information and shall be provided for official CAP business only.

	=== Responsibilities ===		=== 2. Responsibilities ===
	==== a. Commanders/Directors ====		==== a. Commanders/Directors ====
	# Only require the collection of personal information that is absolutely necessary to conduct CAP business (see paragraph 3a below).		# Only require the collection of personal information that is absolutely necessary to conduct CAP business (see paragraph 3a below).
Line 14:		Line 14:
	==== b. Members ====		==== b. Members ====
	# Protect PII that has come into their possession during the normal conduct of CAP business IAW paragraph 3b below.		# Protect PII that has come into their possession during the normal conduct of CAP business IAW paragraph 3b below.

			=== 3. Protection ===
			==== a. Limit the use of PII to absolute need. Whenever possible, forms, applications and other documents should use only the individual’s name, CAP grade and CAPID. Additional information about the individual may then be drawn from the online personnel database, which has appropriate security measures. ====
			==== b. Limit access to PII that has been acquired as part of normal CAP processes. Personal discipline on the part of the custodian of CAP records/documents containing PII is key to preventing unauthorized access. ====
			# CAP records/documents containing PII must be kept under lock and key or in a secure electronic file that is password protected when the records/documents are not in use.
			# When leaving your work area, records containing PII must not be left open and unattended, or in any manner that would allow the data to be seen by an unauthorized individual.
			# Do not leave unattended any laptops, tablet PCs, smartphones, USB flash drives or personal digital assistants (PDA) containing PII.
			# Delete any data containing PII as soon as practical after completing the tasking for which the PII data was acquired.
			# CAP publications and forms issued by any level of command that include requirements to collect or use PII must contain instructions for protecting PII.
			# All devices containing PII should be password-enabled or have data encryption standards installed (if possible) to prevent unauthorized access to the data if the device is stolen or lost.
			# If PII is to be transmitted via radio, only the absolute minimum amount of information essential to mission accomplishment should be transmitted using encrypted radio transmissions if possible.

			=== 3. Disposal ===
			==== a. Disposal methods are considered adequate if the personal data is rendered unrecognizable or beyond reconstruction.
			==== a. Examples of disposal methods for paper records include, but are not limited to tearing, burning, shredding, or mutilation. ====
			==== b. Examples of disposal methods for electronic records and media include, but are not limited to, overwriting, degaussing, disintegration, pulverization, burning, shredding or sanding. Just deleting electronic files containing PII is not sufficient. ====

BReady72 at 22:40, 14 August 2018

2018-08-14T22:40:49Z

← Older revision		Revision as of 18:40, 14 August 2018
Line 9:		Line 9:

	=== Responsibilities ===		=== Responsibilities ===
	==== Commanders/Directors ====		==== a. Commanders/Directors ====
	# Only require the collection of personal information that is absolutely necessary to conduct CAP business (see paragraph 3a below).		# Only require the collection of personal information that is absolutely necessary to conduct CAP business (see paragraph 3a below).
	# Ensure that all personnel within their area of responsibility understand the need to protect PII.		# Ensure that all personnel within their area of responsibility understand the need to protect PII.
	==== Members ====		==== b. Members ====
	# Protect PII that has come into their possession during the normal conduct of CAP business IAW paragraph 3b below.		# Protect PII that has come into their possession during the normal conduct of CAP business IAW paragraph 3b below.

BReady72 at 22:39, 14 August 2018

2018-08-14T22:39:43Z

← Older revision		Revision as of 18:39, 14 August 2018
Line 7:		Line 7:
	=== General ===		=== General ===
	Personally identifiable information (PII) is CAP confidential information about an individual that can be used to distinguish or trace that individual’s identity. Examples of PII include, but are not limited to, social security number; age; marital status; race; date and place of birth; telephone numbers; other demographic, medical history, personal, medical and financial information. Unauthorized access to the PII of members/employees must be prevented to the maximum extent possible. PII shall only be made available to those individuals who have a specific need to have such information and shall be provided for official CAP business only.		Personally identifiable information (PII) is CAP confidential information about an individual that can be used to distinguish or trace that individual’s identity. Examples of PII include, but are not limited to, social security number; age; marital status; race; date and place of birth; telephone numbers; other demographic, medical history, personal, medical and financial information. Unauthorized access to the PII of members/employees must be prevented to the maximum extent possible. PII shall only be made available to those individuals who have a specific need to have such information and shall be provided for official CAP business only.

			=== Responsibilities ===
			==== Commanders/Directors ====
			# Only require the collection of personal information that is absolutely necessary to conduct CAP business (see paragraph 3a below).
			# Ensure that all personnel within their area of responsibility understand the need to protect PII.
			==== Members ====
			# Protect PII that has come into their possession during the normal conduct of CAP business IAW paragraph 3b below.

BReady72 at 22:37, 14 August 2018

2018-08-14T22:37:03Z

← Older revision		Revision as of 18:37, 14 August 2018
Line 1:		Line 1:
	== Personally Identifiable Information (PII) ==		== Personally Identifiable Information (PII) ==

	== CAP Regulation 1-2 ==		== [https://www.gocivilairpatrol.com/media/cms/R001_002_15BAF8B12FA4B.pdf CAP Regulation 1-2] ==

	This regulation defines rules for protecting Personally Identifiable Information (PII), collected, generated, or maintained by Civil Air Patrol (CAP), from unauthorized disclosure and emphasizes the role of CAP users in ensuring that the appropriate physical and technical safeguards are in place to protect all CAP systems (both hard copy and electronic) that contain PII. This regulation applies to all CAP members.		This regulation defines rules for protecting Personally Identifiable Information (PII), collected, generated, or maintained by Civil Air Patrol (CAP), from unauthorized disclosure and emphasizes the role of CAP users in ensuring that the appropriate physical and technical safeguards are in place to protect all CAP systems (both hard copy and electronic) that contain PII. This regulation applies to all CAP members.

BReady72 at 22:36, 14 August 2018

2018-08-14T22:36:15Z

← Older revision		Revision as of 18:36, 14 August 2018
Line 1:		Line 1:
	== Personally Identifiable Information (PII) ==		== Personally Identifiable Information (PII) ==
	~~<br>~~
	== CAP Regulation 1-2 ==		== CAP Regulation 1-2 ==

BReady72 at 22:36, 14 August 2018

2018-08-14T22:36:00Z

← Older revision		Revision as of 18:36, 14 August 2018
Line 1:		Line 1:
	== Personally ~~identifiable information~~ (PII) ==		== Personally Identifiable Information (PII) ==
	<br>		<br>
	Personally identifiable information (PII) is ~~any data that could potentially identify a specific~~ individual~~. Any information~~ that can be used to distinguish ~~one person from another~~ and ~~can~~ be ~~used~~ for ~~de-anonymizing anonymous data can be considered PII~~.		== CAP Regulation 1-2 ==

			This regulation defines rules for protecting Personally Identifiable Information (PII), collected, generated, or maintained by Civil Air Patrol (CAP), from unauthorized disclosure and emphasizes the role of CAP users in ensuring that the appropriate physical and technical safeguards are in place to protect all CAP systems (both hard copy and electronic) that contain PII. This regulation applies to all CAP members.

			=== General ===
			Personally identifiable information (PII) is CAP confidential information about an individual that can be used to distinguish or trace that individual’s identity. Examples of PII include, but are not limited to, social security number; age; marital status; race; date and place of birth; telephone numbers; other demographic, medical history, personal, medical and financial information. Unauthorized access to the PII of members/employees must be prevented to the maximum extent possible. PII shall only be made available to those individuals who have a specific need to have such information and shall be provided for official CAP business only.

BReady72 at 22:30, 14 August 2018

2018-08-14T22:30:40Z

← Older revision		Revision as of 18:30, 14 August 2018
Line 1:		Line 1:
	== Personally identifiable information (PII) ==<br>		== Personally identifiable information (PII) ==
			<br>
	Personally identifiable information (PII) is any data that could potentially identify a specific individual. Any information that can be used to distinguish one person from another and can be used for de-anonymizing anonymous data can be considered PII.		Personally identifiable information (PII) is any data that could potentially identify a specific individual. Any information that can be used to distinguish one person from another and can be used for de-anonymizing anonymous data can be considered PII.