HF 2138

as introduced - 88th Legislature (2013 - 2014) Posted on 02/25/2014 03:15pm

A bill for an act
relating to data practices; requiring databases maintained by a government
entity to track user access; amending Minnesota Statutes 2012, section 13.05,
subdivision 5.

BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:

Section 1.

Minnesota Statutes 2012, section 13.05, subdivision 5, is amended to read:

Subd. 5.

Data protection.

(a) The responsible authority shall (1) establish
procedures to assure that all data on individuals is accurate, complete, and current for the
purposes for which it was collected; and (2) establish appropriate security safeguards for
all records containing data on individuals.

(b) When not public data is being disposed of, the data must be destroyed in a way
that prevents its contents from being determined.

new text begin (c) No later than January 1, 2020, any database maintained by a government entity
that contains private or confidential data on individuals must have the capacity, within
each individual record, to track the identities of users who access the data, including the
date and time the data were accessed and the purpose for which the access occurred. These
data maintain the same classification as the underlying individual record and may be
accessed by the responsible authority at any time for purposes of auditing the database's
user activity and security safeguards.
new text end