Government. Data Collection & Dissemination Practices Act; dissemin. of personal to federal gov't.

From the Legislature

Government Data Collection and Dissemination Practices Act; dissemination of personal information to federal government; civil penalties. Provides that any agency or political subdivision of the Commonwealth shall only disseminate personal information (i) to the extent necessary to comply with state or federal law, including the federal Health Insurance Portability and Accountability Act; (ii) to the extent necessary to carry out the administration of a state or federal program pursuant to state or federal law; (iii) to comply with a subpoena, court order, or administrative proceeding; (iv) to the extent necessary to ensure fulfillment of the obligations of a purchase or contract made in accordance with the Virginia Public Procurement Act or a memorandum of understanding or management agreement made in accordance with the Restructured Higher Education Financial and Administrative Operations Act; (v) when the data subject has given consent; or (vi) to the extent necessary to accomplish a proper purpose of the agency. The bill also prohibits an agency or political subdivision from selling personal information. The bill authorizes a court, in the case of a willful and knowing violation, to subject a specific public officer, appointee, or employee of any agency to civil penalties.