Ex. 2 HA ANNLPLAN, EIV - Laserfiche WebLink

Home Browse Search

Security Violations may include the following: Disclosure of private data Attempts to access unauthorized data Sharing of User IDs and passwords Upon discovery of a possible improper disclosure of EIV information or another security violation by a SAHA Employee or any other person, the individual making the observation or receiving the information should contact their immediate supervisor or the EIV Security Officer(s). If the incident is reported to a supervisor, the supervisor must immediately inform the EIV Security Officer. The EIV Security Officer(s) will document all improper disclosures in writing on a security disclosure form providing details including who was involved what was disclosed, how the disclosure occurred, and where it occurred. The following contacts will be made: The EIV Security Officer(s) will contact and provide the written documentation of the security violation. The Security Officer(s) is responsible for informing the Housing & Neighborhood Development Manager of any security breaches. The Housing & Neighborhood Development Manager or her designee will provide the HUD Field Office Public Housing Director with the written documentation; and, The HUD Field Office Public Housing Director, upon receipt of the documentation, will make a determination regarding the referral and provision of the written documentation to the Headquarters EIV Coordinator and/or EIV Security Officer(s) for further review and follow-up action. Appendix 1. Safeguards Provided by the Privacy Act The Privacy Act provides safeguards for individuals against invasion of privacy by requiring Federal agencies, except as otherwise provided by law or regulation to: 1.Permit individuals to know what records pertaining to them are collected, maintained, used or disseminated; 2.Allow individuals to prevent records pertaining to them, obtained for a particular purpose from being used or made available for another purpose without their consent; 3.Permit individuals to gain access to information pertaining to them, obtain a copy of all or any portions thereof, and correct or amend such records; 4.Collect, maintain, use or disseminate personally identifiable information in a manner that ensure the information is current and accurate, and that adequate safeguards are provided to prevent misuses of such information; 5.Permit exemption from the requirements of the Act only where an important public policy need exists as determined by specific statutory authority; and 6.Be subject to a civil suit for any damages that occur as a result of action that violates any rights under this Act. 7 Exhibit 2