DCVPA recognizes the need to protect students and employees from the improper release of social security numbers and other personal identifying information. To this end, DCVPA requires that all school employees comply with the Identity Protection Act of 20051 and any other federal and state laws governing the collection, use and disclosure of personal identifying information. No person shall knowingly disclose, transfer or unlawfully use the social security number or other personal identifying information of any employee, student or other individual.

For purposes of this policy, personal identifying information includes: student records under the Family Educational Rights and Privacy Act, social security numbers; employer taxpayer identification numbers; drivers license numbers; state identification card numbers; passport numbers; checking accounts; savings accounts; credit card and debit card numbers; personal identification (PIN) codes; digital signatures; any numbers or information that can be used to access an individual's financial resources; biometric data; fingerprints; and passwords.

The following regulations apply:

1. the confidentiality of social security numbers and personal identifying information is maintained consistent with legal requirements;

2. the unlawful collection, disclosure and use of social security numbers and personal identifying information are prohibited;

3. access to and dissemination of information or documents containing social security numbers and personal identifying information is limited internally within the school and externally with the general public;

4. documents containing social security numbers and personal identifying information are disposed of properly;

5. social security numbers and personal identifying information are redacted from public documents;

6. social security numbers and personal identifying information are collected only when specifically authorized by law or if collection is imperative for the performance of the school's duties and such need has been clearly documented;

7. UNCW procedures (which includes DCVPA) governing the maintenance and destruction of records are followed for all documents containing social security numbers and other personal identifying information; and

8. in the event of a security breach, in which personal information is accessed and acquired without authorization, the notice requirements of G.S. 75-65 are followed.

Any individual who fails to comply with this policy and the superintendent's rules and regulations shall be subject to disciplinary action up to and including suspension or expulsion for students and termination for employees. In addition, such person may be subject to criminal prosecution.

Issued: July 12, 2018