SF863 - Data Practices and Government Data Classifications

• Requires informed consent for disclosure of private data to be documented in plain language, dated, specific about data type, recipients, purpose, and expiration date (not exceeding one year, with exceptions for life/health insurance and medical assistance).

• Establishes separate requirements for insurance-specific informed consent that must meet seven specific criteria including designation of the government entity and insurance recipient, with expiration dates not exceeding two years for life/health insurance policies.

• Expands definition of personnel data to include employee suggestions for cost-cutting and efficiency improvements, with employees identified in suggestions having access to all data except the identity of the suggesting employee.

• Makes employee disciplinary action data public upon final disposition, including specific reasons and supporting documentation, with limited exceptions for confidential sources and public officials.

• Modifies temporary data classification procedures by increasing initial classification period from 45 to 90 days and allowing responsible authorities to withdraw applications prior to commissioner decision.