Depends on the type of business I would imagine.  We must abide by the
Virginia "Government Data Collection and Dissemination Practices Act"
(formerly known as the Personal Privacy Act) and it requires us to have
specific policies and procedures in place as well as holding the
employee and the employer responsible for breaches of the Act.
Inadvertent is difficult to prove if you have specific policies and
procedures.  We now require our employees to read and sign an agreement
that outlines their responsibilities in regards to personal information
(which is defined) and the penalty if the information is inappropriately
or illegally divulged.

Ginny Jones
(Virginia A. Jones, CRM, FAI)
Records Manager
Information Technology Division
Newport News Dept. of Public Utilities
Newport News, VA
[log in to unmask]

-----Original Message-----
From: Records Management Program [mailto:[log in to unmask]] On
Behalf Of Blake Richardson
Sent: Tuesday, December 06, 2005 2:22 PM
To: [log in to unmask]
Subject: Employee Liability

I am trying to determine the extent of an employee's liability, if any,
v. liability to the organization, if it can be proven that the employee
1) inadvertently divulged the personal information or personal health
information of a customer and 2) if they willfully or maliciously
divulged the information.  I have read in some cases that there is no
liability to the employee if it is inadvertent.

 

Thanks

 

Blake Richardson, CRM


List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance