Orange County NC Website
Orange County Sheriff's Office <br />Policy Manual <br />Records Maintenance and Release <br />Copyright Lexipol, LLC 2018/02/14, All Rights Reserved. <br />Published with permission by Orange County Sheriff's Office ***DRAFT***Records Maintenance and Release - 4 <br />All questions regarding compliance with any subpoena duces tecum or discovery request must be <br />promptly referred to the Legal Advisor for the Office so that a timely response can be prepared. <br />803.7 EXPUNGEMENT <br />Expungement orders received by the Office should be submitted to the Legal Advisor for review <br />and guidance and submitted to the Custodian of Records for appropriate redaction. The Custodian <br />of Records shall expunge such records as ordered by the court. Once expunged, members shall <br />respond to any inquiry as though the record did not exist (N.C.G.S. § 15A-145, 146, 147 et seq., <br />N.C.G.S. § 7B-3200). <br />803.8 TRAINING <br />All members authorized to manage, release, or facilitate public access to Office records should <br />complete a training program that includes identification of material appropriate for public access <br />and the Office systems and procedures guiding such release and access. <br />803.9 SECURITY BREACHES <br />Members who become aware that any Orange County Sheriff's Office system containing personal <br />information may have been breached should notify the Records Administrator as soon as <br />practicable. <br />The Records Administrator shall ensure that written notice is provided to any resident of this State <br />whose unsecured personal information has been breached pursuant to the requirements set forth <br />in N.C.G.S. § 75-65. Notice shall also be provided to the Consumer Protection Division of the <br />Attorney General’s Office. Notice shall be in the form and manner specified in N.C.G.S. § 75-65. <br />Notice shall be given as soon as practicable after the discovery of a possible breach (N.C.G.S. <br />§ 75-65). Notice to individuals may be delayed if notification will impede a criminal investigation <br />or jeopardize national or homeland security. <br />For purposes of the notice requirement, personal information includes a person’s first name or <br />first initial and last name in combination with any one or more of the following (N.C.G.S. § 75-61): <br />(a)Social Security number <br />(b)Driver’s license number, state identification card number, or other similar identification <br />number <br />(c)Full account number, credit or debit card number, or any required security code, <br />access code, or password that would permit access to an individual’s financial account <br />If the breach reasonably appears to have been made to protected information covered in the <br />Protected Information Policy (Policy 804), the Records Administrator should promptly notify <br />the appropriate member designated to oversee the security of protected information (see the <br />Protected Information Policy). <br />9