White background, black text Sally Ploof Hunter Memorial Library The connection point of choice for our community's information, entertainment and social needs. Image: Round seal includes library name and basic image of female holding a book.

Breach Notification Policy

Sally Ploof Hunter Memorial Library Breach Notification Policy

Approved on October 26 2021

Statement

Sally Ploof Hunter Memorial Library (BLR) will investigate and provide notice of information security breaches to affected individuals and/or Federal and State agencies in accordance with applicable Federal and State requirements.

Purpose

The purpose of this policy is to outline how Sally Ploof Hunter Memorial Library will respond to incidents involving data breaches. It will identify and define steps and procedures that will be followed when those breaches occur and will address how affected individuals will be notified as required by relevant Federal and State laws.

Scope

This policy applies to all Sally Ploof Hunter Memorial Library information assets or information assets under the care of the Sally Ploof Hunter Memorial Library, and applies to all individuals who interact with, access, or store Sally Ploof Hunter Memorial Library electronic information regardless of storage device, medium, or physical location.

Protected Information
Protected information is defined as:

  • Personal information that includes a person’s name, personal mark or other identifier, combined with one of the following;
    • Social Security Number
    • Driver’s License Number
    • Non-Driver Identification Card Number
    • Account number or credit/debit card number in combination with required security code, access code or password
    • Biometric Information
  • A username or email address in combination with a password or security question or answer that would permit access to an online account.

Protected private information does not include publicly available information which is lawfully made available to the general public.

Data Breach

A Data Breach is defined by Sally Ploof Hunter Memorial Library as an incident of unauthorized access to or acquisition of, or acquisition without valid authorization of computerized data that compromises the security, confidentiality, or integrity of the protected information maintained by Sally Ploof Hunter Memorial Library. 

Reporting Responsibility

All individuals affiliated with Sally Ploof Hunter Memorial Library in any capacity, including but not limited to member library staff, vendors, and contractors, should report suspected or actual data breaches immediately to the Library Director. Sally Ploof Hunter Memorial Library will investigate all reports of breaches related to information maintained by Sally Ploof Hunter Memorial Library.

Sally Ploof Hunter Memorial Library Procedures

Sally Ploof Hunter Memorial Library administration will initiate the following procedures upon notification of a suspected breach: 

  • Containment – If Sally Ploof Hunter Memorial Library determines there was a data breach, Sally Ploof Hunter Memorial Library will work with the affected department(s) or location(s) to contain the breach.
  • Director Notification — The Library Director will be notified when determination of an actual breach is made.
  • Assessment – Once the breach is contained and eradicated, N Sally Ploof Hunter Memorial Library will assess the extent and impact of the breach and provide documentation.
  • Data preservation – All available evidence related to the breach will be preserved by Sally Ploof Hunter Memorial Library for future analysis.
  • Reporting and legal obligations —The Sally Ploof Hunter Memorial Library Director will consult with legal counsel to determine specific legal obligations relating to the breached information and relevant reporting obligations.