州首席隐私官：政府机构中的CPO职能定位.pdf

1、Jennie Hoelscher,CIPP/USChief Privacy Officer,Texas Department of Information ResourcesTed Cotterill,FIP,CIPP/US,CIPMChief Privacy Officer,State of IndianaCherie Givens,JD,PhD,CIPPChief Privacy Officer,State of North CarolinaPeter Gallinari,Director Data Privacy Officer,State of Tennessee Katy Ruckl

2、e,JD,FIP,CIPP/US,CIPMChief Privacy Officer,State of WashingtonWELCOME AND INTRODUCTIONSCherie Givens,CPON.C.Department of Information TechnologyMain FunctionsEstablish and own a vision for a statewide privacy program through leadership,clear objectives,policy development,and building relationships w

3、ith stakeholders and business partners.Build a strategic and comprehensive statewide privacy program tailored to the state of North Carolina Work closely with the CRO and executive leaders to ensure data privacy and security while leveraging the data assets to improve North Carolina and control risk

4、s that impact privacy.Office of Privacy and Data ProtectionState Laws and PoliciesN.C.General Statutes-Chapter 143B Article 15:Department of Information Technology,143B-1376 Statewide Security and Privacy StandardsN.C.General Statutes-Chapter 75 Article 2A:Identity Theft Protection Act;Chapter 14,Ar

5、ticle 19C,Identity Theft,14-113.20,Identifying InformationNCDIT,State Adoption of Fair Information Practice Principles(FIPPs)NCDIT,State Adoption of NIST Risk Management Framework(Adoption of NIST SP 800-37 Rev.2 and NIST SP 800-53 Rev.5)NCDIT,Statewide Data Classification and Handling PolicyRole of

6、 the CPO in Texas Provide privacy training and awareness to public sector employees Consult with agencies as they develop privacy programs and acquire data protection toolsCoordinate a network of state agency privacy officers to collaborate and share resourcesReview privacy and data protection provi