Pursuant to Government Code section 11019.9, all departments and agencies of the State of California shall enact and maintain a permanent privacy policy, in adherence with the Information Practices Act of 1977 (Civil Code section 1798 et seq.), that includes, but is not necessarily limited to, the following principles:

(a) Personally identifiable information may only be obtained through lawful means.

(b) The purposes for which personally identifiable data are collected shall be specified at or prior to the time of collection, and any subsequent use of the data shall be limited to and consistent with the fulfillment of those purposes previously specified.

(c) Personal data may not be disclosed, made available, or otherwise used for a purpose other than those specified, except with the consent of the subject of the data, or as required by law or regulation.

(d) Personal data collected shall be relevant to the purpose for which it is needed.

(e) The general means by which personal data is protected against loss, unauthorized access, use, modification, or disclosure shall be posted, unless the disclosure of those general means would compromise legitimate agency objectives or law enforcement purposes.

WCB will implement the privacy policy through the following:

• Prominently post the policy in its offices and on the WCB website at:   www.wcb.ca.gov;
  
  
• Distribute the policy to each of its employees and contractors who have access to personal data. Pursuant to Civil Code § 1798.19, when DFG provides by contract for the operation or maintenance of records containing personal information to accomplish an agency function, it shall cause, consistent with its authority, the requirements of Civil Code §1798 to be applied to those records;
  
  
• Comply with the Information Practices Act (Civil Code Section 1798 et seq); Government Code section 11015.5; and all other laws pertaining to information privacy.  For additional information regarding WCB's compliance with the Information Practice Act, and the Public Records Act, please see the Fish and Game Operations Manual, Personnel, Safety and Training sections 12780-12782 (July 1995); and sections 12783-12798 (January 1989);
  
  
• DFG employees shall use appropriate means to successfully implement and adhere to this privacy policy.
  
  
• The position in DFG responsible for the implementation of and adherence to this privacy policy is Staff Counsel, Marcie Larson, Office of the General Counsel, at (916)654-3821.