Privacy Policies

Image
West Virginia State Privacy Office

​​​These policies were originally issued by the Chair of the Health Care Authority and were reaffirmed, on June 12, 2017, to continue to be in effect by the Director of the Board of Risk and Insurance Management (BRIM). This was done subsequent to the move of the West Virginia State Privacy Office to BRIM by Executive Order 3-17.
 

The Privacy Management Team developed these policies, after obtaining consensus from all Executive Branch Departments. There may be specific Department-level policies and procedures issued. Please contact your Department Privacy Officer for more information.
 

Memo to reaffirm privacy policies 
Accountability Policy - WVEB-P101​ 
​Issued 3/16/2012 Revised 11/16/2023

Executive Branch Confidentiality Agreement Document​​​
Privacy Impact Assessment Guidance - WVEB-P101.3 
Issued 6/15/2015
Revised 10/9/2014

Execution of Confidentiality Agreements Procedure - WVEB-P101.2
Revised 4/1/2012
Response to Unauthorized Disclosures Procedure - WVEB-P101.1
Issued 1/20/2011

Privacy Policy Introduction

Privacy Policy Definitions
Consent Policy - WVEB-P102​
Issued 1/20/2011
Privacy Policy Introduction

Privacy Policy Definitions
Issued 1/30/2009
Individual Rights Policy - WVEB-P103​
Minimum Necessary and Limited Use Policy - WVEB-P104
Notice Policy - WVEB-P105
Security Safeguards Policy - WVEB-P106​
Redaction Procedure - WVEB-P106.1

Implementation Resources:

Examples of Notices:​
Executive Branch Short Form Notice​

Additional Sample Notices 
Guide to Supporting Individual Rights

Minimum Necessary Training 
Training Slides 
SPII Flow Chart 
Data Use Agreement Template​