የግላዊነት ፖሊሲ

• Makes sure privacy is protected
• Ensures the program is shared with all staff
• ደንቦቹ ግልጽ ካልሆኑ የመጨረሻ ውሳኔ አለው

• Runs the privacy program
• Updates rules every two years or sooner if laws change
• Provides staff and funds for privacy work
• Reviews risks and systems
• የውሂብ ደህንነትን ለመፈተሽ ከኦዲት አስተዳዳሪ ጋር ይሰራል

• ሁሉንም የ VDSS ቢሮዎች ይደግፋል
• Helps new systems include privacy
• Reviews complaints
• Investigates possible breaches

• Teach staff about privacy rules
• Help provide training

• Make sure rules are followed in their teams
• የአካባቢውን የግላዊነት እና የደህንነት ኃላፊዎች ይሾሙ
• Report privacy problems to the Privacy Officer
• Ensure staff get training

• ከመድረስዎ በፊት የሰራተኞች ስልጠና ያስፈልጋል
• Manage risks
• ተገዢ ሆነው ይቆዩ
• Appoint system administrators

• Decide how data is classified
• የውሂብ አጠቃቀም ጥያቄዎችን ያጽድቁ
• Set rules for access

• Protect data in local systems
• የአካባቢ የግላዊነት ደንቦችን ከVDSS ጋር ያጋሩ
• ስልጠና ይፍጠሩ
• Prevent one person from full control over sensitive work

• Follow rules
• Sign acknowledgments each year
• ችግሮችን ወዲያውኑ ሪፖርት ያድርጉ
• ከተቀጠሩ በኋላ በ 30 ቀናት ውስጥ እና ከዚያ በኋላ በየአመቱ ስልጠናውን ያጠናቅቁ

• Run systems safely
• Build privacy controls into daily work

• የውሂብ ደህንነትን ይጠብቁ
• Run systems in line with rules
• Give reports to Data Owners

The VDSS Privacy Program:

• Follows federal and state laws
• Protects data from misuse or loss
• Responds to privacy complaints
• የግላዊነት መቆጣጠሪያዎችን ይገመግማል እና ያሻሽላል
• Trains staff

• All staff, interns and contractors must finish privacy training.
• ስልጠናው ከተቀጠረበት ቀን ጀምሮ በ 30 ቀናት ውስጥ እና ከዚያ በኋላ በየአመቱ መከናወን አለበት።
• Records of training are kept.

• VDSS is the owner of all data collected.
• የውሂብ ባለቤቶች የመዳረሻ እና የጥበቃ ደንቦችን ያስቀምጣሉ።

ውሂቡ እንደሚከተለው ተሰይሟል፦

• የህዝብ – can be shared
• Private – limited to staff
• ሚስጥራዊ – very limited, protected by law

• Data can only be shared if the law allows.
• ጥያቄዎች በውሂብ ባለቤቶች መጽደቅ አለባቸው።

• Records must be kept only as long as needed.
• Old records must be destroyed safely.

• Clients can see their own records.
• መዝገቦቹ የተሳሳቱ ከሆኑ ደንበኞች እርማቶችን መጠየቅ ይችላሉ።

• ህጉ ከሚፈቅደው ውጪ መረጃ ከመጋራቱ በፊት ደንበኞች ፈቃድ መስጠት አለባቸው።

• ደንበኞች የግላዊነት ቅሬታ ቅጽ ማስገባት ይችላሉ።
• VDSS ችግሮችን መፍታት እና መፍታት አለበት።

• ሁሉም ሰራተኞች የግላዊነት ጥሰቶችን ወዲያውኑ ሪፖርት ማድረግ አለባቸው።
• Breaches will be reviewed and fixed.
• Clients will be told if their data was part of a breach.

• Devices with data must be kept safe.
• በአሮጌ መሳሪያዎች ላይ ያለ ውሂብ እንደገና ጥቅም ላይ ከመዋሉ ወይም ከመወገዱ በፊት መሰረዝ አለበት።

• All new projects must consider privacy.
• Risks must be reviewed before new systems go live.

• VDSS Privacy Program must be reviewed every two years.
• Staff must know where to find privacy policies.

• Staff with access to data must be screened before hire.
• Job roles decide what data can be seen.

• ስርዓቶች ግላዊነትን ለመጠበቅ መሳሪያዎች ሊኖራቸው ይገባል።
• አደጋዎችን ለመፈተሽ ሪፖርቶች ይካሄዳሉ።

• ግላዊነት እና ደህንነት አብረው ይሄዳሉ።
• VDSS የመረጃ ደህንነት ፕሮግራም መመሪያን ይከተላል።