EXPIRED

This document is no longer current.

200 KAR 1:015.Data Breach Notification Forms.

RELATES TO:

KRS 61.932, 61.933

STATUTORY AUTHORITY:

KRS 42.726(2)(b), 61.932(2)(b)2., 61.933

NECESSITY, FUNCTION, AND CONFORMITY:

KRS 42.726(2)(b) authorizes the Finance and Administration Cabinet, Commonwealth Office of Technology ("COT") to promulgate administrative regulations relating to COT's duties. KRS 61.933 specifically authorizes COT to promulgate administrative regulations prescribing forms necessary for notification by state agencies and nonaffiliated third parties when they suspect or have determined that a breach of personal information that the state agency or nonaffiliated third party maintains or otherwise possesses on behalf of another agency has occurred. KRS 61.932(2)(b)2. specifically authorizes COT to promulgate administrative regulations prescribing a form to be used if law enforcement agencies have requested a delay of notification to allow for investigation of the suspected or determined breach. This administrative regulation establishes the required forms for notification of a suspected or determined breach of personal information or a request to delay notification by law enforcement.

Section 1.

Administrative - Required Forms.

(1)

Finance Form FAC-001, Suspected and Determined Breach Notification Form, shall be completed by a state agency or nonaffiliated third party to notify the agency for whom it maintains or otherwise possesses personal information regarding a suspected or determined breach in data.

(2)

Finance Form FAC-002, Delay Notification Record, shall be completed by a state agency or nonaffiliated third party if a law enforcement agency has requested a delay of notification to allow for investigation of the suspected or determined breach.

Section 2.

Incorporation by Reference.

(1)

The following material is incorporated by reference:

(a)

Finance Form FAC-001, "Suspected and Determined Breach Notification Form," January 1, 2015; and

(b)

Finance Form FAC-002, "Delay Notification Record," August, 2014.

(2)

This material may be inspected, copied, or obtained, subject to applicable copyright law, at the Commonwealth Office of Technology, 101 Cold Harbor Drive, Frankfort, Kentucky 40601 Monday through Friday, 8 a.m. to 5 p.m., and on the Finance and Administration Cabinet Web site, http://finance.ky.gov/Pages/default.aspx.

HISTORY: (41 Ky.R. 670; Am. 1308; eff. 1-5-2015.)

200 KAR 1:015.Data Breach Notification Forms.

RELATES TO:

KRS 61.932, 61.933

STATUTORY AUTHORITY:

KRS 42.726(2)(b), 61.932(2)(b)2., 61.933

NECESSITY, FUNCTION, AND CONFORMITY:

Section 1.

Administrative - Required Forms.

(1)

(2)

Section 2.

Incorporation by Reference.

(1)

The following material is incorporated by reference:

(a)

Finance Form FAC-001, "Suspected and Determined Breach Notification Form," January 1, 2015; and

(b)

Finance Form FAC-002, "Delay Notification Record," August, 2014.

(2)

HISTORY: (41 Ky.R. 670; Am. 1308; eff. 1-5-2015.)

Page Generated: 9/19/2024, 12:15:11 PM

Kentucky
General Assembly

Title 200 | Chapter 001 | Regulation 015

200 KAR 1:015.Data Breach Notification Forms.

RELATES TO:

STATUTORY AUTHORITY:

NECESSITY, FUNCTION, AND CONFORMITY:

Section 1.

(1)

(2)

Section 2.

(1)

(a)

(b)

(2)

200 KAR 1:015.Data Breach Notification Forms.

RELATES TO:

STATUTORY AUTHORITY:

NECESSITY, FUNCTION, AND CONFORMITY:

Section 1.

(1)

(2)

Section 2.

(1)

(a)

(b)

(2)