Resolution 2011-10 STATE OF ILLINOIS )
)ss
COUNTY OF KENDALL )
RESOLUTION NO. 2011 -_
RESOLUTION APPROVING AN IDENTITY PROTECTION POLICY
i
WHEREAS, the United City of Yorkville, as a municipal utility, is subject to the
State of Illinois' Identity Protection Act; and
WHEREAS, the City Council of the United City of Yorkville has considered and
developed an Identity Protection Policy pursuant to the State of Illinois' Identity
Protection Act; and
WHEREAS, it has been determined to be in the best interests of the United City
of Yorkville to approve an Identity Protection Policy in the form attached hereto in
Exhibit "A ".
NOW THEREFORE BE IT RESOLVED, by the Mayor and City Council of
the United City of Yorkville, Kendall County, Illinois, that the Identity Protection Policy
in the form set forth on Exhibit "A" attached hereto and incorporated herein is hereby
adopted as the Identity Protection Policy of the City.
Passed by the City Council of the United City of Yorkville, Kendall County,
Illinois this C day of , A.D. 2011.
CITY CLERK
ROSE SPEARS � t DIANE TEELING
GEORGE GILSON, JR. JACQUELYN MILSCHEWSKI
CARLO COLOSIMO MARTY MUNNS l
CHRIS FUNKHOUSER I rInA k(9
Approved by me, as Mayor of the United City of Yorkville, Kendall County,
Illinois, this 17 day of MA y , A.D. 2011.
14jox 1
MAYOR
Exhibit "A"
United City of Yorkville
Policy with Regard to the Collection, Use and Communication of
Individuals' Social Security Numbers
(Identity Protection Policy)
This policy is to comply with Public Act 096 -0874 of the State of Illinois, cited as the
Identity Protection Act.
1. Definitions.
"Person" means any individual in the employ of the United City of Yorkville.
"Publicly post" or "publicly display" means to intentionally communicate or otherwise
intentionally make available to the general public.
2. Prohibited Activities.
(a) No officer or employee of the United City of Yorkville shall do any of the following:
(1) Publicly post or publicly display in a any manner and individual's social security
number.
(2) Print an individual's social security number on any card required for the
individual to access products or services provided by the person or entity. j
(3) Require and individual to transmit his or her social security number over the
Internet, unless the connection is secure or the social security number is
encrypted.
(4) Print an individual's social security number on any materials that are mailed to
the individual, through the U.S. Postal Service, any private mail service,
electronic mail, or any similar method of delivery, unless State or federal law
requires the social security number to be on the document to be mailed.
Notwithstanding any provision in this Section to the contrary, social security
numbers may be included in applications and forms sent by mail, including, but
not limited to, any material mailed in connection with the administration of the
Unemployment Insurance Act, any material mailed in connection with any tax
administered by the Department of Revenue, and documents sent as part of an
application or enrollment process or to establish, amend, or terminate and
account, contract, or policy or to confirm the accuracy of the social security
number. A social security number that may permissibly be mailed under this
Section may not be printed, in whole or in part, on a postcard or other mailer that
does not require an envelope or be visible on an envelope without the envelope
having been opened.
(b) Except as otherwise provided in this policy, beginning July 1, 2010, no officer or
employee of the United City of Yorkville shall do any of the following:
(1) Collect, use, or disclose a social security number from an individual, unless (i)
required to do so under State or federal law, rules, or regulations, or the
collection, use, or disclosure of the social security number is otherwise necessary
for the performance of that agency's duties and responsibilities; (ii) the need and
purpose for the social security number is documented before collection of the
social security number; and (iii) the social security number collected is relevant
to the documented need and purpose.
(2) Require an individual to use his or her social security number to access an
Internet website.
(3) Use the social security number for any purpose other than the purpose for which
it was collected.
(c) The prohibitions in subsection (b) do not apply in the following circumstances:
(1) The disclosure of social security numbers to agents, employees, contractors, or
subcontractors of the United City of Yorkville or disclosure to another
governmental entity or its agents, employees, contractors, or subcontractors if
disclosure is necessary in order for the entity to perform its duties and
responsibilities; and, if disclosing to a contractor or subcontractor, prior to such
disclosure, the officer or employee of the United City of Yorkville must first
receive from the contractor or subcontractor a copy of the contractor's or
subcontractor's policy that sets forth how the requirements imposed under this
Policy of the United City of Yorkville to protect and individual's social security
number will be achieved.
(2) The disclosure of social security numbers pursuant to a court order, warrant, or
subpoena.
(3) The collection, use, or disclosure of social security numbers in order to ensure
the safety o£ United City of Yorkville employees; persons committed to
correctional facilities, local jails, and other law- enforcement facilities or
retention centers; wards of the State; and all persons working in or visiting a
United City of Yorkville facility.
(4) The collection, use, or disclosure of social security numbers for internal
verification or administrative purposes.
(5) The collection or use of social security numbers to investigate or prevent fraud,
to conduct background checks, to collect a debt, to obtain a credit report from a
consumer reporting agency under the federal Fair Credit Reporting Act, to
i
undertake any permissible purpose that is enumerated under the federal Gramm
Leach Bliley Act, or to locate a missing person, a lost relative, or a person who is
due a benefit, such as a pension benefit or an unclaimed property benefit.
(d) Any standards of the United City of Yorkville for the collection, use, or disclosure of
social security numbers that are stricter than the standards under this policy with
respect to the protection of those social security numbers, then, in the event of any
conflict with the provisions of this policy, the stricter standards adopted by the
United City of Yorkville shall control.
3. Public Inspection and copying of documents. Notwithstanding any other provision of
this policy to the contrary, all officers and employees of the United City of Yorkville
must comply with the provisions of any other State law with respect to allowing the
public inspection and copying of information or documents containing all or any
portion of an individual's social security number. All officers and employees of the
United City of Yorkville must redact social security numbers from the information
or documents before allowing the public inspection or copying of the information or
documents.
4. Applicability.
(a) This policy does not apply to the collection, use, or disclosure of a social security
number as required by State or federal law, rule, or regulation.
i
(b) This policy does not apply to documents that are required to be open to the public
under any State or federal law, rule, or regulation applicable case law, Supreme
Court Rule, or the Constitution of the State of Illinois.
5. Compliance with federal law. If federal law takes effect requiring any federal agency
to establish a national unique patient health identifier program, the United City of
Yorkville shall follow that law.
6. Embedded social security numbers. Beginning December 31, 2009, no officer or
employee of the United City of Yorkville may encode or embed a social security
number in or on a card or document, including, but not limited to, using a bar code,
chip, magnetic strip, RFID technology, or other technology, in place of removing the
social security number as required by this policy.
i
i
a
7. Identity - protection requirements.
(a) All officers, employees and agents of the United City of Yorkville identified as
having access to social security numbers in the course of performing their duties
shall be trained to protect the confidentiality of social security numbers. Training
shall include instructions on the proper handling of information that contains social
security numbers from the time of collection through the destruction of the
information.
(b) Only employees who are required to use or handle information or documents that
contain social security numbers shall have access to such information or documents.
(c) Social security numbers requested from an individual shall be collected in a manner
that makes the social security number easily redacted if required to be released as
part of a public records request.
(d) When collecting a social security number or upon request by the individual, a
statement of the purpose or purposes for which the United City of Yorkville is
collecting and using the social security number shall be provided.
(e) A written copy of this privacy policy, and any amendment thereto, shall be filed with
the City Clerk within 30 days after approval of this policy or any amendment
thereto.
(f) The United City of Yorkville shall advise its employees of the existence of the
policy and make a copy of the policy available to each employee, and shall also
make this privacy policy available to any member of the public, upon request. If the
United City of Yorkville amends this privacy policy, then the United City of
Yorkville shall also advise its employees to the existence of the amended policy
available to each employee.
8. Violation. Any person who intentionally violates the prohibitions in Section 10 of
the Identity Protection Act [Paragraph 2 of this policy] is guilty of a Class B
misdemeanor.
9. This policy does not supersede any more restrictive law, rule, or regulation regarding
the collection, use, or disclosure of social security numbers.