The City Manager is hereby authorized and directed to:
(a) Appoint one individual to be directly responsible for the personal information system of the City ("System");
(b) Adopt and implement rules that provide for the operation of the System in accordance with the provisions of Ohio R.C. Chapter 1347 that, apply to local agencies;
(c) Inform each of the City employees who have any responsibility for the operation or maintenance of the System, or for the use of personal information maintained in the System, of the applicable provisions of this Ohio R.C. 1347 and of all rules adopted in accordance with Ohio R.C. §1347.05;
(d) Specify disciplinary measures to be applied to any employee who initiates or otherwise contributes to any disciplinary or other punitive action against any individual who brings to the attention of appropriate authorities, the press, or any member of the public, evidence of unauthorized use of information contained in the System;
(e) Inform a person who is asked to supply personal information for the System whether the person is legally required to, or may refuse to, supply the information;
(f) Develop procedures for purposes of monitoring the accuracy, relevance, timeliness, and completeness of the personal information in the System, and, in accordance with the procedures, maintain the personal information in the System with the accuracy, relevance, timeliness, and completeness that is necessary to assure fairness in any determination made with respect to a person on the basis of the information;
(g) Take reasonable precautions to protect personal information in the System from unauthorized modification, destruction, use of disclosure;
(h) Collect, maintain, and use only personal information that is necessary and relevant to the functions that the City is required or authorized to perform by statute, ordinance, code, or rule, and eliminate personal information from the System when it is no longer necessary and relevant to those functions.
(Ord. 2014-11. Passed 3-5-14.)