HB 2228 - DIGEST

     Directs the department to create and maintain a registry describing the information systems or data bases maintained by state agencies that contain personally identifiable information.  The registry need not include systems or data bases that contain personally identifiable information pertaining solely to public officials acting in their official capacity.  The department may require state agencies to provide information necessary to create and maintain the registry.  The registry shall contain at least the following information for each system or data base:  (1) A description of the purpose;

     (2) a description of the type of information included;

     (3) the number of records involved;

     (4) the statutory authorization;

     (5) the methods by which information is collected or updated;

     (6) the retention schedule; and

     (7) a list of any other data bases that are merged or matched with this one.