Data Management Plans for Procurement

This law outlines the regulations for biometric identifiers for vendors working with Washington State Agencies.

Legislation regulating biometric identifiers for agencies.

The Data Classification Standard establishes definitions for classifications of data, and requires agencies to consider legal requirements and mission-related use when categorizing data. It also ensures that these factors inform agency data protection strategies.

The Data Sharing Policy enables agencies to identify data sharing risks and implement controls appropriate to mitigate those risks.

The Encryption Standard requires encryption to protect state data from exploitation by making data unreadable and unusable to unauthorized viewers.

The Information Security Risk Management Policy establishes a common framework for their IT risk management strategies. Senate Bill 5432, section 7c, requires agencies mitigate risks discovered in the environments they control. It also requires the Office of Cybersecurity to report risks that are not mitigated appropriately to the governor and appropriate committees. This policy provides agencies with a framework to satisfy this requirement.

This records retention schedule authorizes the destruction/transfer of public records documenting common functions and activities of state government agencies. It is expected that agencies will follow the general scheduled and their agency-specific schedule (if one exists).

The purpose of this document is to articulate fundamental privacy principles to guide agency practices and establish public trust.

Created by WaTech and based upon the NIST Privacy Framework, the document provides an overview of aspects to include in agency privacy programs.