(a) Definition of Sensitive Information. Sensitive information includes the following items whether stored in electronic or printed format:
(1) Credit card information, including any of the following:
A. Credit card number (in part or whole);
B. Credit card expiration date;
C. Cardholder name;
D. Cardholder address.
(2) Tax identification numbers, including:
A. Social Security number;
B. Business identification number;
C. Employer identification numbers.
(3) Payroll information, including, among other information:
A. Paychecks;
B. Pay stubs.
(4) Cafeteria plan check requests and associated paperwork.
(5) Medical information for any employee or customer, including but not limited to:
A. Doctor names and claims;
B. Insurance claims;
C. Prescriptions;
D. Any related personal medical information.
(6) Other personal information belonging to any customer, employee or contractor, examples of which include:
A. Date of birth;
B. Address;
C. Phone numbers;
D. Maiden name;
E. Names;
F. Customer number.
(b) Municipal personnel are encouraged to use common sense judgment in securing confidential information to the proper extent. Furthermore, this section should be read in conjunction with Ohio's Public Records Act and the Village's open records policy. If an employee is uncertain of the sensitivity of a particular piece of information, he/she should contact their supervisor. In the event that the Village cannot resolve a conflict between this policy and the Ohio Public Records Act, the Village will contact the Director of Law.
(c) When a customer of the Village has made application and been provided a confidential identification password by the Village, Village employees will be permitted to share sensitive information with the customer, upon disclosure of the password, over the telephone.
(Ord. 2008-46. Passed 12-1-08; Ord. 2010-45. Passed 12-20-10.)