6VAC35-160-100: Requirements when records are automated

Participating agencies having automated juvenile record information files shall:

1. Designate a data owner to maintain and control authorized user accounts, system management, and the implementation of security measures;

2. Develop and implement a logical access procedure to prevent unauthorized access and dissemination; and

3. Develop procedures for discarding old computers to ensure that information contained on those computers is not available to unauthorized persons. All data must be completely erased or otherwise made unreadable in accordance with COV ITRM Standard SEC 514–04, Removal of Commonwealth Data from Electronic Media Standard.