3.2.3 - Employee Identification ID Policy
Federal Authority:
The Privacy Act of 1974
5 U.S.C. § 552a(2020) - Records Maintained on Individuals
United States Code
26 U.S.C. § 6103 - Confidentiality and Disclosure of Returns and Return Information
26 U.S.C. § 7213 - Unauthorized Disclosure of Information
42 U.S.C. § 653(b) - Federal Parent Locator Service - Disclosure of Information to Authorized Persons'
42 U.S.C. § 654a(d) (1-5)(f) - Automated data processing
Code of Federal Regulations
45 CFR 302.35(2)(ii) - State Parent Locator Service
45 CFR 303.21 - Safeguarding and Disclosure of Confidential Information
45 CFR 307.13 - Security and Confidentiality for Computerized Support Enforcement Systems in Operation after October 1, 1997
The Federal Information Security Modernization Act of 2014 (FISMA)
IRS Publication 1075 Local Agencies - Safeguards for Protecting Federal Tax Returns and Return Information (Rev. 11-2021)
OCSS State Child Support Agency - Security Agreement
State Authority:
Wyoming Statute
Wyo. Stat. § 7-19-201(a)(xxiii) - State or National Criminal History Record Information
Wyo. Stat. § 9-21-101 - Data Policies
Wyo. Stat. § 20-4-162 - Nondisclosure of information in exceptional circumstances
Wyo. Stat. § 35-32-102(c) - Genetic Testing; prohibitions; exceptions
Wyo. Stat. § 40-12-502 - Computer Security Breach; Notice to Affected Persons
Wyoming Child Support Enforcement Rule
Chapter 13 - Safeguarding and Disclosure of Confidential Information
Wyoming Department of Family Services Policy
AHR 5.0 - Dress Code
Policy Number: 3.2.3
Effective Date: March 1, 2024
Purpose
This purpose of this policy is to establish the rules related to the employee's identification badge to prevent unauthorized access to the Child Support Program's (CSP) Federal Tax Information (FTI) and Personally Identifiable Information (PII)
Definition(s)
A. Minimum Protection Standards (MPS)
MPS establishes a uniform method of physically protecting data and systems as well as non-electronic forms of Federal Tax Information (FTI) and Personally Identifiable Information (PII).
The objective of MPS is to prevent unauthorized access to FTI and PII. MPS thus requires two (2) barriers between an unauthorized person from gaining access to the Child Support Program's FTI and PII. Acceptable barriers include a "secured perimeter" , a "security room" , a "badged employee" and a "security container".
B. Badged Employee
During business hours, if authorized personnel are to serve as the second barrier between FTI and unauthorized individuals, the authorized personnel must wear picture identification badges or credentials. The badge must be clearly displayed and worn above the waist.
Scope
This policy applies to all employees of...
The Child Support Program;
Any contractor and subcontractor doing business with CSP whose job duties require access to logical and/or physical CSP FTI and PII;
Any contractor and subcontractor doing business with another Wyoming state agency whose job duties require logical and/or physical access to CSP FTI and PII;
The Wyoming Clerks of District Court whose job duties require logical and/or physical access to CSP FTI and PII; and
Any other Wyoming agency doing business with CSP whose job duties require access to logical and/or physical CSP FTI and PII.
Policy
All employees working for CSP, any contractor and subcontractor doing business with CSP, Wyoming Clerk of District Court, and any other Wyoming agency, whose job duties required access to CSP's FTI and PII shall wear identification badges that are clearly displayed and worn during business hours. For a contractor, subcontractor, Wyoming Clerk of District Court, or any Wyoming agency whose jobs duties required access to CSP's FTI and PII to be exempts from this requirement it must be demonstrated there are two other security barriers in place to prevent unauthorized access to CSP's FTI and PII to the CSP IT Security Liaison.
Review
This policy shall be reviewed at a minimum, every three (3) years or when changes are made to W.S. 7-19-201(a) or to IRS Publication 1075 background check requirements prior to the three (3) year review.
Responsible Party
The Child Support Program IT Security Officer is responsible for making sure this policy is maintained so as to meet federal, state, and agency regulations and requirements..
Training
Training shall be maintained by CSP and made available to each employee of...
The Child Support Program;
Any contractor and subcontractor doing business with CSP whose job duties require access to logical and/or physical CSP FTI and PII;
Any contractor and subcontractor doing business with another Wyoming state agency whose job duties require logical and/or physical access to CSP FTI and PII;
The Wyoming Clerks of District Court whose job duties require logical and/or physical access to CSP FTI and PII; and
Any other Wyoming agency doing business with CSP whose job duties require access to logical and/or physical CSP FTI and PII.
Version Number: 1
Last Reviewed Date: February 7, 2024
Last Revised Date: February 7, 2024