Penalty provisions of CIPSEA
| CIPSEA requires a person to take preventive action to avoid disclosing identifiable information. Specific data protection methodologies should be applied to aggregate statistical data to test and ensure that no identifiable information is revealed when releasing statistical aggregate information. |
| Reckless behavior does not equal willful behavior. Willful means deliberate behavior. |
| Examples of reckless behavior in handling CIPSEA protected data: |
 |
Placing a file containing company-level data on a public file server for others to download |
|
Not applying any data protection methods to publicly released tabular data that is protected under CIPSEA |
| Although some behavior, such as leaving information unprotected in your office, may not carry criminal penalties, it does reflect on your job performance and ability to safeguard confidential information. It may also affect your future job assignments and access to CIPSEA data. |
| Remember: To be subject to criminal penalties, the release of the identifiable CIPSEA-protected data must be willful and intentional. |
| Now for a knowledge check... |
|
|
