HomeMy WebLinkAboutNotification Policy.PDFVillage of Cayuga Heights
Notification Policy
The Village of Cayuga Heights (VCH) notification policy complies with the New York
State Technology Law, Section 208 whereby the VCH will notify an individual when any
of his/her "pivale information" has been acquired without valid authonzation.
Private Information includes :
(1) social security number;
(2) driver's license number or non-driver identification card number; or
(3) account number, credit or debit card number, in combination with any required
security code, access code, or password which would permit access to an
individual' s financial account.
"Private information" does not include publicly avaiiable nformation that is lawfully
made available to the general public from federal, state or govemment records.
When the VCH becomes aware that private information has been compromised, the VCH
will notify the affected individual by one of the following methods and shall provide
contract information and description of the information improperly disseminated:
(1) Written notice, with proof of transmittal maintained by VCH
(2) Telephone notification, with log maintained of the communication by VCH
(3) E-mail notice, (f the recipient consents) and a log is maintained thereof by the
VCH
,I
Upon completion of the notification, the VCH shall notify the following entities of the
content and distribution of the notices provided, the approximate number of affected
persons, and the nature of the breach and appropriate restoration measures taken:
(a) The New York State Cyber Security and Critical lnfrastructure
Coordination Office
(b) The New York Attorney General and the Consumer Protection Board if it
was necessarv to notifv New York residents