107.03 SENSITIVE INFORMATION POLICY.
   (a)   Sensitive information includes the following items whether stored in electronic or printed format:
      (1)   Credit card information, including any of the following:
         A.   Credit card number (in part or whole).
         B.   Credit card expiration date.
         C.   Cardholder name.
         D.   Cardholder address.
      (2)   Tax identification numbers, including:
         A.   Social Security number.
         B.   Business identification number.
         C.   Employer identification numbers.
      (3)   Payroll information, including, among other information:
         A.   Paychecks.
         B.   Pay stubs.
      (4)   Medical information for any employee or customer, including but not limited to:
         A.   Doctor names and claims.
         B.   Insurance claims.
         C.   Prescriptions.
         D.   Any related personal medical information.
      (5)   Other personal information belonging to any customer, employee or contractor, examples of which include:
         A.   Date of birth.
         B.   Address.
         C.   Phone numbers.
         D.   Maiden name.
         E.   Names
         F.   Customer/Account number.
   (b)   Municipal personnel are encouraged to use common sense judgment in securing confidential information to the proper extent. Furthermore, this section should be read in conjunction with the Ohio Public Records Act and the municipality's open records policy. If an employee is uncertain of the sensitivity of a particular piece of information he/she should contact their supervisor. In the event that the municipality cannot resolve a conflict between this policy and the Ohio Public Records Act, the municipality will consult with legal counsel.
(Ord. 03-09. Passed 4-20-09.)