 |
Regulations of Connecticut State Agencies (Last Updated: June 14,2023) |
 |
Title32 Commerce and Economic and Community Development |
|
|
SubTitle32-1c-1_32-1c-7. Personal Data |
| Sec. 32-1c-1. Definitions |
|
Latest version.
|
|
(a) "Category of Personal Data" means the classification of personal information set forth in the Personal Data Act, Conn. Gen. Stat. Sec. 4-190 (9). (b) "Other Data" means any information which because of name, identifying number, mark or description can be readily associated with a particular person. (c) Department means the Department of Economic Development. (d) Definitions of terms in Conn. Gen. Stat. Sec. 4-190 shall apply to these regulations. |
|
(Effective July 18, 1986) |
| Sec. 32-1c-2. General nature and purpose of personal data systems |
|
Latest version.
|
|
(a) The Department maintains the following personal data systems: (1) Personnel Records (A) All personnel records are maintained at 210 Washington Street, Hartford, Connecticut 06106. (B) Personnel records are maintained in manual form. (C) Personnel records are maintained for the purpose of providing a history of payroll, promotion, discipline and related personnel information concerning Economic Development employees. (D) Personnel records are the responsibility of the Personnel Officer of the Department, whose business address is 210 Washington Street, Hartford, Connecticut 06106. All requests for disclosure or amendment of these records should be directed to the Personnel Officer. (E) Routine sources for information retained in personal records are generally the employee, previous employers of the employee, references provided by applicants for employment, the employee's supervisor, the Comptroller's Office, Department of Administrative Services, Division of Personnel & Labor Relations, and State insurance carriers. (F) Personal data in personnel records are collected, maintained and used under authority of the State Personnel Act, Conn. Gen. Stat. Sec. 5-193 et seq. (2) Retirement system participants records (A) Participant records are maintained with the Personnel Officer of the Department, 210 Washington Street, Hartford, Connecticut 06106. (B) Participant records are maintained in manual form. (C) Participant records are maintained for the purpose of determining the eligibility for and the amount of benefit payments to be made to participants and beneficiaries. (D) Participant records are maintained with the Personnel Officer of the Department, 210 Washington Street, Hartford, Connecticut. All requests for disclosure or amendment of these records should be directed to the Personnel Officer. (E) Routine sources of information retained in participant records are generally the participant, current and previous employers of the participant, and the Department. (F) Personal data in Retirement System Participant Records are collected, maintained and used under authority of Conn. Gen. Stat. Sec. 10-183b through 10-183dd, inclusive. |
|
(Effective July 18, 1986) |
| Sec. 32-1c-3. Categories of personal data |
|
Latest version.
|
|
(a) Personnel records (1) The following categories of personal data are maintained in personnel records: (A) Educational records. (B) Medical or emotional condition or history. (C) Employment records. (D) Marital status. (2) The following categories of other data may be maintained in personnel records: (A) Addresses. (B) Telephone numbers. (3) Personnel records are maintained on employees of the Department and applicants for employment with the Department. (b) Retirement system participant records (1) The following categories of personal data are maintained in retirement system participant records: (A) Educational records. (B) Medical or emotional condition or history. (C) Employment records. (D) Salary records. (E) Contributions records. (F) Marital status. (G) Date of birth. (2) The following categories of other data may be maintained in retirement system participant records: (A) Addresses. (B) Social security number. (C) Retirement System membership number. (D) Telephone numbers. (E) Bank account identification. (F) Income tax withholding information. (3) Retirement System Participant Records are maintained on current and former Department employees. |
|
(Effective July 18, 1986) |
| Sec. 32-1c-4. Maintenance of personal data—general |
|
Latest version.
|
|
(a) Personal data will not be maintained by the Department unless relevant and necessary to accomplish the lawful purposes of the agency. Where the agency finds irrelevant or unnecessary public records on its possession, the agency shall dispose of the records in accordance with its records retention schedule, or, if the records are not disposable under the records retention schedule, request permission from the Public Records Administrator to dispose of the records under Conn. Gen. Stat. Sec. 11-8a. (b) The Department will collect and maintain all records with accurateness and completeness. (c) Insofar as it is consistent with the needs and mission of the Department, it, wherever practical, shall collect personal data directly from the persons to whom a record pertains. (d) Employees of the Department involved in the operations of the agency's personal data systems will be informed of the provisions of the (1) Personal Data Act, (2) the agency's regulations adopted pursuant to Sec. 4-196, (3) the Freedom of Information Act and (4) any other state or federal statute or regulations concerning maintenance or disclosure of personal data kept by the agency. (e) All employees of the Department shall take reasonable precautions to protect personal data under their custody from the danger of fire, theft, flood, natural disaster and other physical threats. (f) The Department shall incorporate by reference the provisions of the Personal Data Act and regulations promulgated thereunder in all contracts, agreements or licenses for the operation of a personal data system or for research, evaluation and reporting of personal data for the agency or on its behalf. (g) The Department shall have an independent obligation to insure that personal data requested from any other state agency is properly maintained. (h) Only employees of the Department who have a specific need to review personal data records for lawful purposes of the agency will be entitled to access to such records under the Personal Data Act. (i) The Department will keep a written up-to-date list of individuals entitled to access of each of the agency's personal data systems. (j) The Department will insure against unnecessary duplication of personal data records. In the event it is necessary to send personal data records through interdepartment mail, such records will be sent in envelopes or boxes sealed and marked "confidential." (k) The Department will insure that all records in manual personal data systems are kept under lock and key and, to the greatest extent practical, are kept in controlled access areas. |
|
(Effective July 18, 1986) |
| Sec. 32-1c-5. Maintenance of personal data—disclosure |
|
Latest version.
|
|
(a) Within four business days of receipt of a written request therefor, the Department shall mail or deliver to the requesting individual a written response in plain language, informing him/her as to whether or not it maintains personal data on that individual, the category and location of the personal data maintained on that individual and procedures available to review the records. (b) Except where nondisclosure is required or specifically permitted by law, the Department shall disclose to any person upon written request all personal data concerning that individual which is maintained by it. The procedures for disclosure shall be in accordance with Conn. Gen. Stat. Sections 1-15 through 1-21K. If the personal data is maintained in coded form, the Department shall transcribe the data into a commonly understandable form before disclosure. (c) The Department is responsible for verifying the identity of any person requesting access to his/her own personal data. (d) The Department is responsible for ensuring that disclosure made pursuant to the Personal Data Act is conducted so as not to disclose any personal data concerning persons other than the person requesting the information. (e) The Department may refuse to disclose to a person medical, psychiatric or psychological data on that person if the Agency determines that such disclosure would be detrimental to that person. (f) In any case where the Department refuses disclosure, it shall advise that person of his/her right to seek judicial relief pursuant to the Personal Data Act. (g) If the Department refuses to disclose medical, psychiatric or psychological data to a person based on its determination that disclosure would be detrimental to that person and nondisclosure is not mandated by law, it shall, at the written request of such person, permit a qualified medical doctor to review the personal data contained in the person's records to determine if the personal data should be disclosed. If disclosure is recommended by the person's medical doctor, the Department shall disclose the personal data to such person; if nondisclosure is recommended by such person's medical doctor, the Department shall not disclose the personal data and shall inform such person of the judicial relief provided under the Personal Data Act. (h) The Department shall maintain a complete log of each person, individual, agency or organization who has obtained access to, or to whom disclosure has been made of, personal data under the Personal Data Act, together with the reason for each such disclosure or access. This log shall be maintained for not less than five years from the date of such disclosure or access or for the life of the personal data record, whichever is longer. |
|
(Effective July 18, 1986) |
| Sec. 32-1c-6. Contesting the content of personal data records |
|
Latest version.
|
|
(a) Any person who believes that the Department is maintaining inaccurate, incomplete or irrelevant personal data concerning him/her may file a written request with the Department for correction of said personal data. (b) Within 30 days of receipt of such request, the Department shall give written notice to that person that it will make the requested correction, or if the correction is not to be made as submitted, the Department shall state the reason for its denial of such request and notify the person of his/her right to add his/her own statement to his/her personal data records. (c) Following such denial by the Department, the person requesting such correction shall be permitted to add a statement to his or her personal data record setting forth what that person believes to be an accurate, complete and relevant version of the personal data in question. Such statements shall become a permanent part of the Department's personal data system and shall be disclosed to any individual, agency or organization to which the disputed personal data is disclosed. |
|
(Effective July 18, 1986) |
| Sec. 32-1c-7. Uses to be made of the personal data |
|
Latest version.
|
|
(a) Employees of the Department who are assigned personnel and payroll responsibilities use the personal data contained in the Department's personnel records in processing promotions, reclassifications, transfers to another agency, retirement, and other personnel actions. Supervisors use the personal data when promotion, career counseling, or disciplinary action against such employee is contemplated, and for other employment-related purposes. (b) All employees of the Department use retirement system participant records for the purpose of making an accurate determination of the retirement benefit to which such participants may be eligible, or the amount payable to such participant upon application for a refund of his/her retirement contributions. (c) The Department retains personnel records according to schedules published by the Public Records Administrator, Connecticut State Library; it retains retirement system participant data permanently. (d) When an individual is asked to supply personal data to the Department, it shall disclose to that individual, upon request, it's name and the division which is requesting the data, the legal authority under which it is empowered to collect and maintain the personal data, the individual's rights pertaining to such records under the Personal Data Act and the Department's regulations, the known consequences arising from supplying or refusing to supply the requested personal data, and the proposed use to be made of the requested personal data. |
|
(Effective July 18, 1986) |