Loading...
§ 38.368 TRAINING.
   (A)   All current employees and officials of the county shall be trained to protect the confidentiality of social security numbers. Training shall include the proper handling of information that contains social security numbers from the time of collection through the destruction of the information. Any new employees or officials shall receive training before accessing data containing social security numbers.
   (B)   Only employees who are required to use or handle information or documents that contain social security numbers shall have access to such information or documents.
   (C)   Social security numbers requested from an individual shall be provided in a manner that makes the social security number easily redacted if required to be released as part of a public records request.
   (D)   When collecting a social security number or upon request by the individual, a statement of the purpose or purposes for which the agency is collecting and using the social security number must be provided.
   (E)   All county offices must advise its employees of the existence of the policy and make a copy of the policy available to each of its employees, and must also make its privacy policy available to any member of the public, upon request. If a local government agency amends its privacy policy, then that agency must file a written copy of the amended policy with the appropriate entity and must also advise its employees of the existence of the amended policy and make a copy of the amended policy available to each of its employees.
(Res. 2017-14A, passed 12-21-2017)
§ 38.369 CONFLICT.
   In the event of a conflict with the Illinois Identity Protection Act and this section state law shall control.
(Res. 2017-14A, passed 12-21-2017)
NURSING MOTHER POLICY
§ 38.380 NURSING MOTHER POLICY.
   (A)   The County of DeWitt shall make reasonable efforts to provide a private room or other location, in close proximity to the work area, other than a toilet stall, for employees, who are nursing mothers, to express milk in privacy.
   (B)   The County of DeWitt shall provide to employees, who are nursing mothers, reasonable break time to express milk for their nursing infant child each time the employee has the need to express milk for one year after the child's birth. The break time may run concurrently with any break time already provided to the employee. The County of DeWitt may not reduce an employee's compensation for time used for the purpose of expressing milk or nursing a baby, The County of DeWitt shall provide reasonable break time as needed by the employee unless to do so would create an undue hardship as defined by item (j) of Section 2-102 of the Illinois Human Rights Act.
(Res. 2019-03, passed 3-21-2019)
NURSING MOTHER POLICY
§ 38.380 NURSING MOTHER POLICY.
   (A)   The County of DeWitt shall make reasonable efforts to provide a private room or other location, in close proximity to the work area, other than a toilet stall, for employees, who are nursing mothers, to express milk in privacy.
   (B)   The County of DeWitt shall provide to employees, who are nursing mothers, reasonable break time to express milk for their nursing infant child each time the employee has the need to express milk for one year after the child's birth. The break time may run concurrently with any break time already provided to the employee. The County of DeWitt may not reduce an employee's compensation for time used for the purpose of expressing milk or nursing a baby, The County of DeWitt shall provide reasonable break time as needed by the employee unless to do so would create an undue hardship as defined by item (j) of Section 2-102 of the Illinois Human Rights Act.
(Res. 2019-03, passed 3-21-2019)
MULTI-FACTOR AUTHENTICATION POLICY AND PROCEDURES
§ 38.385 PURPOSE.
   (A)   Two-factor authentication (2FA) is required to be used by all DeWitt County users with access to DeWitt County data and systems or with access to other people’s sensitive or restrictive information in those systems. At DeWitt County, 2FA is achieved through the use of a special one-time password (OTP) authentication generated from an approved hardware token (dongle) or via the Duo Mobile application in addition to your login credentials.
   (B)   Violation of approved policies and procedures could result in termination.
(Res. 23-16, passed 12-21-2023)
§ 38.386 POLICY.
   (A)   When authenticating using 2FA all users must use the generated OTPs from their approved hardware token (dongle) or via approval through the Duo Mobile application in addition to their login credential.
   (B)   Only approved and registered hardware tokens (dongles) or the Duo Mobile application may be used for OTP generation.
   (C)   Lost, stolen or damaged devices must be reported immediately to the direct supervisor or County Administrator.
   (D)   Devices must be properly secured, not shared.
   (E)   Users are expected not to leave their OTP devices unattended in public places.
   (F)   Users should not mark their hardware dongle with any identifying information such as name, password, or any reference to DeWitt County systems.
   (G)   Computers will automatically lock the screen after five minutes of inactivity. This step is essential to enhance the security of our systems and protect sensitive information. This setting should never be changed by any employee.
(Res. 23-16, passed 12-21-2023)
Loading...