OAKLAND COUNTY, MICHIGAN GEOSPATIAL DATA ACCESS, DISTRIBUTION AND USE

Similar documents
Building Information Modeling and Digital Data Exhibit

Cell Phone Policy. 1. Purpose: Establish a policy for cell phone use and compensation allowance.

MANUAL OF UNIVERSITY POLICIES PROCEDURES AND GUIDELINES. Applies to: faculty staff students student employees visitors contractors

UT HEALTH SAN ANTONIO HANDBOOK OF OPERATING PROCEDURES

The City of Mississauga may install Closed Circuit Television (CCTV) Traffic Monitoring System cameras within the Municipal Road Allowance.

California Code of Regulations TITLE 21. PUBLIC WORKS DIVISION 1. DEPARTMENT OF GENERAL SERVICES CHAPTER 1. OFFICE OF THE STATE ARCHITECT

Housecall Privacy Statement Statement Date: 01/01/2007. Most recent update 09/18/2009

Distribution Policy & Fees Schedule

Open Data Policy City of Irving

Virginia Commonwealth University School of Medicine Information Security Standard

SUBJECT: Effective Date: Policy Number: Florida Public Records Act: Scope and

MICRO-ENTERPRISE CREDENTIAL TRACKING AGREEMENT

The Data Distribution Policy is subdivided into categories, and explains how data will be delivered by agency:

SPRING-FORD AREA SCHOOL DISTRICT

Subject: Kier Group plc Data Protection Policy

PUBLIC RECORDS. May 2016

9/30/2014. Oregon Public Risk Manager s Conference October Retention and Public Records Requests. Facts

Subcontracted Delivery Policy

4.2 Electronic Mail Policy

SOUTHERN COMPANY DISTRIBUTION INTERCONNECTION POLICY

Offer Description : Cisco Webex

NEWTON COUNTY OPEN RECORDS ACT POLICY

I. PURPOSE III. PROCEDURE

Data Processing Agreement for Oracle Cloud Services

01.0 Policy Responsibilities and Oversight

Community Unit School District No. 1. School Board

PUBLIC WORKS. 1oo. DiEital Fee Schedules. Effective January 1, 2008

It applies to personal information for individuals that are external to us such as donors, clients and suppliers (you, your).

OUTDATED. Policy and Procedures 1-12 : University Institutional Data Management Policy

Privacy Statement. Your privacy and trust are important to us and this Privacy Statement ( Statement ) provides important information

Electronic Contracting: creating legally binding agreements

Steffanie Hall, RHIA HIM Director/Privacy Officer 1201 West 12 th Emporia, Kansas ext

UWTSD Group Data Protection Policy

PA TURNPIKE COMMISSION POLICY

Records Retention Policy

COUNTY OF RIVERSIDE, CALIFORNIA BOARD OF SUPERVISORS POLICY. ELECTRONIC MEDIA AND USE POLICY A-50 1 of 9

This website is managed by Club Systems International on behalf of the Hoburne and Burry and Knight Groups.

BYOD (Bring Your Own Device): Employee-owned Technology in the Workplace

PRIVACY NOTICE. 1.2 We may obtain or collect your Personal Data from various sources including but not limited to:

Consolidated Privacy Notice

MINNESOTA GOVERNMENT DATA PRACTICES ACT

FOIA Request made by: Name: Address: Telephone: Request made on date: Library received request on date: Library staff who received request:

Cloud Computing Standard 1.1 INTRODUCTION 2.1 PURPOSE. Effective Date: July 28, 2015

VERSION 1.3 MAY 1, 2018 SNOWFLY PRIVACY POLICY SNOWFLY PERFORMANCE INC. P.O. BOX 95254, SOUTH JORDAN, UT

Secure Messaging Mobile App Privacy Policy. Privacy Policy Highlights

The University of British Columbia Board of Governors

Checklist: Credit Union Information Security and Privacy Policies

Subject: University Information Technology Resource Security Policy: OUTDATED

Kansas City s Metropolitan Emergency Information System (MEIS)

TechTarget Event Sponsorship Terms and Conditions

Ashford Board of Education Ashford, Connecticut POLICY REGARDING RETENTION OF ELECTRONIC RECORDS AND INFORMATION

HIPAA For Assisted Living WALA iii

CERTIFICATION vs. CERTIFICATE

Institute of Technology, Sligo. Information Security Policy. Version 0.2

UNIVERSITY OF MASSACHUSETTS AMHERST INFORMATION SECURITY POLICY October 25, 2017

Privacy policy. Definitions and interpretation

DATA PROTECTION PRIVACY NOTICE PROTECTING YOUR PERSONAL INFORMATION: YOUR RIGHTS, OUR RESPONSIBILITIES

UTAH VALLEY UNIVERSITY Policies and Procedures

Learning Management System - Privacy Policy

TELECOMMUNICATIONS ACCESS POLICY 2011

REVIEW OF MANAGEMENT AND OVERSIGHT OF THE INTEGRATED BUSINESS MANAGEMENT SYSTEM (IBMS) January 16, 2009

Hewlett Packard Enterprise Company Public Sector - Federal

PayThankYou LLC Privacy Policy

vwork Ltd. Privacy Policy

City of New Haven Water, Sewer and Natural Gas Utilities Identity Theft Prevention Program

Policies & Regulations

Evaluation Criteria. 1) Evidence of Credentials / Certifications in all 4 Fields (Energy, GIS, Master Planning, and Real Property): 10 PTS

Computer Security Incident Response Plan. Date of Approval: 23-FEB-2014

CTI BioPharma Privacy Notice

PENN MANOR SCHOOL DISTRICT

( Utility Name ) Identity Theft Prevention Program

Regulatory Notice 10-21

Privacy Policy This Privacy Policy explains how we use personal information we collect about you when you use our website and covers:

STANDARD OPERATING PROCEDURE Critical Infrastructure Credentialing/Access Program Hurricane Season

PUBLIC HEARING STAFF REPORT

Privacy Policy of

Managing Official Electronic Records Guidelines

Website Guidelines. Website Guidelines. North Orange County Community College District

Cellular Site Simulator Usage and Privacy

What is cloud computing? The enterprise is liable as data controller. Various forms of cloud computing. Data controller

Privacy Policy. Effective date: 21 May 2018

Site Impact Policies for Website Use

CARROLL COUNTY PUBLIC SCHOOLS ADMINISTRATIVE REGULATIONS BOARD POLICY EHB: DATA/RECORDS RETENTION. I. Purpose

Responsible Officer Approved by

Freedom of Information and Protection of Privacy (FOIPOP)

CONNECT TRANSIT CARD Pilot Program - Privacy Policy Effective Date: April 18, 2014

Virginia State University Policies Manual. Title: Information Security Program Policy: 6110

INFORMATION TECHNOLOGY DATA MANAGEMENT PROCEDURES AND GOVERNANCE STRUCTURE BALL STATE UNIVERSITY OFFICE OF INFORMATION SECURITY SERVICES

BISHOP GROSSETESTE UNIVERSITY. Document Administration. This policy applies to staff, students, and relevant data subjects

Website Privacy Policy

The Address Point Data Standard for Minnesota Overview and Frequently Asked Questions

Records Retention 101 for Maryland Clerks

Employee Security Awareness Training Program

WEBSITE DESIGN CONTRACT RECITALS AGREEMENT

WIT Diverse Campus Services Ltd. Data Protection Policy

Data Protection Policy

Last updated 31 March 2016 This document is publically available at

Vodafone Location Services. Privacy Management Code of Practice. Issued Version V1.0

Participation Agreement for the ehealth Exchange

CERTIFIED MAIL LABELS TERMS OF USE and PRIVACY POLICY Agreement

Transcription:

OAKLAND COUNTY, MICHIGAN GEOSPATIAL DATA ACCESS, DISTRIBUTION AND USE The following Geospatial Data Access, Distribution, and Use standard is designed to assist County employees and other approved users in applying the Enhanced Access to Public Records Act, MCL 15.441 et seq., other federal and state law, relevant Oakland County Board of Commissioners resolutions, and Oakland County s Enhanced Access to Public Records Policy when accessing, distributing and using the County s geospatial data. The Oakland County Department of Information Technology (IT) is primarily responsible for overseeing access to and monitoring use of the County s geospatial data in a manner that is consistent with law and County policy, in collaboration with the elected official, department head, agency, board, commission, council, other county public body that is legally responsible for the creation, preparation, ownership, custody, control, maintenance, preservation, guardianship, retention, possession, or use of the geospatial data. 1.0 Geospatial Data Access, Distribution and Use 1.1 Licensed Geospatial Data The County may restrict or deny access to geospatial data because of licensing restrictions on the data s use. Generally, these restrictions apply to commercially-provided data. IT maintains an inventory of licensed geospatial data. As new geospatial data is licensed, IT will update its inventory and advise requestors of restrictions on use pursuant to a license agreement. 1.2 Sensitive Geospatial Data The County may restrict or limit enhanced access to certain sensitive geospatial data provided such an action is permitted under applicable federal and state law, County Board of Commissioners resolution, court order, or court rule. The following criteria, among others, may be used to decide if geospatial data is sufficiently sensitive to merit restricting access to it. 1. Does the geospatial data contain information that would uniquely identify certain people, putting them at risk? 2. Does the geospatial data contain information that would uniquely identify certain facilities, putting them at risk? 3. Do the risks of sharing the geospatial data outweigh the benefits? IT maintains an inventory of existing sensitive geospatial data and updates it as necessary. As new geospatial data is developed or licensed, IT, the agency responsible for producing and maintaining the geospatial data (data custodian), and the Office of Corporation Counsel will determine whether the data is sensitive and if access should be limited. Analysis will include review of the requirements of the Michigan Freedom of Information Act, being MCL 15.231 et seq. IT may impose additional use constraints on a case-by-case or element-by-element basis when granting access to sensitive data. 1

IT may provide a generalized abstraction of sensitive geospatial data in response to a request. The degree of abstraction may be high, medium or low. Generalization may occur at the feature level or the attribute level. An example of generalization is illustrated below in Table 1. Generalization Feature Type Attribute Low Point 123 Main St. Medium Line 101-199 Main St. High Polygon Supervisor s Plat 1.2.1 Access to Sensitive Geospatial Data Table 1 Based upon the guidelines discussed above and the access roles described below, access to sensitive geospatial data may be granted to particular departments, agencies, or individuals, or for particular, identified purposes. The broad categories of access roles are: Business Partner: Participants include Geospatial Data Users (defined in Section 2) who provide public services involving mutual aid, public safety, public health and public infrastructure to constituents. Collaboration Partner: Participants include Geospatial Data Users who collaborate to provide services such as water, sewer or building permit management to constituents. General Consumer: Participants include all public and private agencies or individuals who use geospatial data for mapping, analysis and decision-making. Generally, access to sensitive geospatial data will be limited to Business Partners. In narrow circumstances, access to sensitive geospatial data may be granted to Collaboration Partners. IT will grant General Consumers access to sensitive geospatial data only in very limited circumstances. The relationship between sensitive geospatial data, access roles, sensitivity and generalization is illustrated below in Table 2. Access Role Business Partner Collaboration Partner General Consumer Access Role Characteristics Enforces the highest degree of data restriction. Enforces a moderate degree of data restriction. Enforces the lowest degree of data restriction. Data Sensitivity High Medium Low Data Generalization Low Medium High Table 2 2

Decisions consistent with the authorizing federal and state law or local resolution regarding access, distribution, and use of geospatial data are made according to the uniform process outlined in the Geospatial Data Access, Distribution and Use Decision Tree (Figure 1). The decision tree promotes uniformity in distribution, clarifies responsibilities, and assists with identification of statutory, contractual, licensing, or other restrictions that impact access to and use of geospatial data. Figure 1: Geospatial Data Access, Distribution and Use Decision Tree Oakland County Geospatial Data Access to Geospatial Data Denied Licensing/Use Agreements Apply Licensing and/or Use Restrictions Business/ Collaboration Partner Sensitive Geospatial Data Limited Access to Geospatial Data Geospatial Data User Access to Geospatial Data via One Stop Shop, Access Oakland or Oakland County Website Access To Geospatial Data via LAN or business application 3

2.0 Geospatial Data Users Using a variety of technologies and delivery mechanisms, Oakland County licenses its geospatial data to a large number of users through the Oakland County Access Oakland User Agreement or an intergovernmental agreement. Geospatial data is provided through business applications or static maps on the County s website. Geospatial data is also provided by direct access to the County s wide area network (WAN), through the Oakland County One Stop Shop on recordable media (e.g. CDROM or DVD) and the County s FTP site. Users receive the geospatial data in its native format (ESRI geodatabase or shapefile). Other formats or custom data products may be provided by the Oakland County One Stop Shop. If access is permitted by the controlling agreement and relevant law, costs of developing these formats or custom data products will be consistent with the County s Access Oakland/G2G Cloud Solutions Master Fee Structure. 2.1 Oakland County Departments Participating County departments will be provided access to geospatial data required to perform their designated County functions. Access is via the County s local area network (LAN) as part of the County s enterprise GIS program. County departments should direct requests for access and use of geospatial data to IT. The identified data custodian, IT, and Corporation Counsel will determine whether the requested access and use is consistent with the data custodian s legal obligations regarding the data and whether there are any statutory limitations on access to the data. 2.2 Authorized Agents of Oakland County Departments Authorized agents of the County (e.g., contractors and subcontractors), may be provided with access to geospatial data at NO COST if the requested data is required for the contractor or subcontractor to perform the tasks for which they were hired. The data must be requested by the department that will receive the services. The contractor or subcontractor must agree in writing, that the geospatial data will be used solely for the work it performs for the County and that the data will not be shared or distributed to anyone. If the data is to be used by an authorized agent for public presentation or in a written publication which is outside the scope of the agent s contract with the County, written permission must be obtained from the data custodian, following consultation with Corporation Counsel. 2.3 Cities, Villages, and Townships (CVTs) Direct access to geospatial data will be provided to cities, villages, and townships (CVTs), under an intergovernmental agreement or current County practice, via the County s wide area network (WAN) at NO COST. However, in order to be granted direct access, the CVT must maintain the required ESRI software. CVTs that do not have direct access will be provided with major geospatial data, including parcels, parcel attributes, road centerlines with address ranges, orthoimagery, hydrography, 4

contours, etc., according to an intergovernmental agreement or current County practice, at NO COST. Each dataset will be provided at a frequency that is appropriate for the rate of data maintenance. Obtaining additional copies will be the responsibility of the CVT and can be purchased at the Oakland County One Stop Shop. It is the responsibility of IT to advise and remind the CVT of its obligations regarding the use and sharing of County geospatial data. For data access via certain programs such as CAMS, in order to keep an active user name and password, every 3 years, individual users are required to review the County s electronic communications practices and guidelines, the procedures outlined in this document, and to sign a form indicating that they have completed these tasks. The intergovernmental agreement or current County practice should identify a designated point of contact (department or staff position), limit use of the data to performance of CVT functions, and include provisions describing and defining any rights to share and/or distribute the geospatial data. Requests for amendment to the intergovernmental agreement or current County practice to permit further access and use of geospatial data will be directed to IT, which must consult with the data custodian, Corporation Counsel, and/or the Board of Commissioners. 2.4 Authorized Agents of CVTs Authorized agents (e.g. contractors and subcontractors) may be provided with access to geospatial data at NO COST if the requested data is required for the contractor or subcontractor to perform the tasks for which they were hired and the data is requested by the CVT that will receive the services. The contractor or subcontractor must agree, in writing, that the geospatial data will be used solely for the work it performs for the CVT and that the data will not be shared or distributed to anyone. If the data is to be used by an authorized agent for public presentation or in a written publication which is outside the scope of the agent s contract with the CVT, written permission must be obtained from the data custodian following consultation with Corporation Counsel. 2.5 State, Federal or Regional Governmental Agencies and Academic Institutions State, federal, or regional governmental or quasi-governmental agencies and academic institutions (RCOC, Oakland Schools, etc.) will be provided geospatial data at NO COST upon execution of an intergovernmental agreement. Use will be limited to the performance of their designated function as a state, federal or regional governmental or quasi-governmental agency or academic institution. Individual terms and conditions will be in the signed agreement and describe and define the state, federal or regional governmental or quasi-governmental agency or academic institution s rights to share and/or distribute the geospatial data with another agent. 2.6 Public or Private Organizations or Businesses Public or private organizations or businesses may obtain access to geospatial data at NO COST upon resolution by the Board of Commissioners to waive the fees established in the Access Oakland/G2G Cloud Solutions Master Fee Structure or through an authorization process for requests that has been approved by the Board of Commissioners. The public or private 5

organization or business must execute the Oakland County Access Oakland User Agreement and Fee Waiver. Waivers of fees, as described here, are permitted by Board of Commissioners Miscellaneous Resolution #97165 and the Oakland County Enhanced Access to Public Records Policy approved by the resolution, as amended by resolution #13152. 2.7 Students Students may be provided geospatial data at NO COST upon resolution by the Board of Commissioners to waive the fees established in the Access Oakland/G2G Cloud Solutions Master Fee Structure or through an authorization process for requests that has been approved by the Board of Commissioners. The County may limit access to the data to the identified project area. The Student or legal guardian must execute the Oakland County Access Oakland User Agreement and Fee Waiver for Students and must agree to share the results of any research and/or written work with IT. Waivers of fees, as described here, are permitted by Board of Commissioners Miscellaneous Resolution #97165 and the Oakland County Enhanced Access to Public Records Policy approved by the resolution, as amended by resolution #13152. 3.0 Geospatial Data Consumers Geospatial data consumers not specifically identified in this document will obtain geospatial data from the Oakland County One Stop Shop or the Access Oakland website. Use of the geospatial data will be subject to the terms and conditions in the Oakland County Access Oakland User Agreement, including payment of required fees, which have been approved by the Board of Commissioners in the Access Oakland/G2G Cloud Solutions Master Fee Structure. 6