Protecting Personally Identifiable Information
The city collects, uses, and stores a variety of personally identifiable information. This audit concluded the city has not identified and does not have citywide policies and procedures for protecting the information it collects. The City’s training efforts and safeguards for this information are fragmented. In addition, the City does not have an incident response plan to handle breaches involving personally identifiable information.