Section 149.45. Internet access to social security numbers

(A) As used in this section:

(1) "Personal information" means any of the following:

(a) An individual's social security number;

(b) An individual's federal tax identification number;

(c) An individual's driver's license number or state identification number;

(d) An individual's checking account number, savings account number, or credit card number.

(2) "Public record" and "peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation residential and familial information" have the same meanings as in section 149.43 of the Revised Code.

(3) "Truncate" means to redact all but the last four digits of an individual's social security number.

(B)

(1) No public office or person responsible for a public office's public records shall make available to the general public on the internet any document that contains an individual's social security number without otherwise redacting, encrypting, or truncating the social security number.

(2) A public office or person responsible for a public office's public records that prior to the effective date of this section made available to the general public on the internet any document that contains an individual's social security number shall redact, encrypt, or truncate the social security number from that document.

(3) Divisions (B)(1) and (2) of this section do not apply to documents that are only accessible through the internet with a password.

(C)

(1) An individual may request that a public office or a person responsible for a public office's public records redact personal information of that individual from any record made available to the general public on the internet. An individual who makes a request for redaction pursuant to this division shall make the request in writing on a form developed by the attorney general and shall specify the personal information to be redacted and provide any information that identifies the location of that personal information within a document that contains that personal information.

(2) Upon receiving a request for a redaction pursuant to division (C)(1) of this section, a public office or a person responsible for a public office's public records shall act within five business days in accordance with the request to redact the personal information of the individual from any record made available to the general public on the internet, if practicable. If a redaction is not practicable, the public office or person responsible for the public office's public records shall verbally or in writing within five business days after receiving the written request explain to the individual why the redaction is impracticable.

(3) The attorney general shall develop a form to be used by an individual to request a redaction pursuant to division (C)(1) of this section. The form shall include a place to provide any information that identifies the location of the personal information to be redacted.

(D)

(1) A peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation may request that a public office other than a county auditor or a person responsible for the public records of a public office other than a county auditor redact the address of the person making the request from any record made available to the general public on the internet that includes peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation residential and familial information of the person making the request. A person who makes a request for a redaction pursuant to this division shall make the request in writing and on a form developed by the attorney general.

(2) Upon receiving a written request for a redaction pursuant to division (D)(1) of this section, a public office other than a county auditor or a person responsible for the public records of a public office other than a county auditor shall act within five business days in accordance with the request to redact the address of the peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation making the request from any record made available to the general public on the internet that includes peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation residential and familial information of the person making the request, if practicable. If a redaction is not practicable, the public office or person responsible for the public office's public records shall verbally or in writing within five business days after receiving the written request explain to the peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation why the redaction is impracticable.

(3) Except as provided in this section and section 319.28 of the Revised Code, a public office other than an employer of a peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation or a person responsible for the public records of the employer is not required to redact the residential and familial information of the peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation from other records maintained by the public office.

(4) The attorney general shall develop a form to be used by a peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation to request a redaction pursuant to division (D)(1) of this section. The form shall include a place to provide any information that identifies the location of the address of a peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation to be redacted.

(E)

(1) If a public office or a person responsible for a public office's public records becomes aware that an electronic record of that public office that is made available to the general public on the internet contains an individual's social security number that was mistakenly not redacted, encrypted, or truncated as required by division (B)(1) or (2) of this section, the public office or person responsible for the public office's public records shall redact, encrypt, or truncate the individual's social security number within a reasonable period of time.

(2) A public office or a person responsible for a public office's public records is not liable in damages in a civil action for any harm an individual allegedly sustains as a result of the inclusion of that individual's personal information on any record made available to the general public on the internet or any harm a peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation sustains as a result of the inclusion of the address of the peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation on any record made available to the general public on the internet in violation of this section unless the public office or person responsible for the public office's public records acted with malicious purpose, in bad faith, or in a wanton or reckless manner or division (A)(6)(a) or (c) of section 2744.03 of the Revised Code applies.

Amended by 129th General AssemblyFile No.43, HB 64, §1, eff. 10/17/2011.

Amended by 128th General AssemblyFile No.9, HB 1, §101.01, eff. 10/16/2009.

Effective Date: 2008 HB46 09-01-2008