Ask Reggi Your Question Now
Can I collect cookie information from participants in Hawaii? What are the requirements?
To collect cookie information from participants in Hawaii, you must comply with the state’s personal information protection requirements [1.2]. According to HIRS 487N-7, any government agency that maintains one or more personal information systems must submit an annual report to the council on the existence and character of each personal information system added or eliminated since the agency’s previous annual report. The report must include the name or descriptive title of the personal information system and its location, the nature and purpose of the personal information system and the statutory or administrative authority for its establishment, the categories of individuals on whom personal information is maintained, including the approximate number of all individuals on whom personal information is maintained, and the categories of personal information generally maintained in the system, including identification of records that are stored in computer accessible records or maintained manually. Additionally, the report must include all confidentiality requirements relating to personal information systems or parts thereof that are confidential pursuant to statute, rule, or contractual obligation, and personal information systems maintained on an unrestricted basis. The report must also provide detailed justification of the need for statutory or regulatory authority to maintain any personal information system or part thereof on a confidential basis for all personal information systems or parts thereof that are required by law or rule. Furthermore, the report must identify the agency’s policies and practices regarding personal information storage, duration of retention of information, and elimination of information from the system, the uses made by the agency of personal information contained in any personal information system, the identity of agency personnel, by job classification, and other agencies, persons, or categories to whom disclosures of personal information are made or to whom access to the personal information system may be granted, including the purposes of access and any restrictions on disclosure, access, and redisclosure, a list identifying all forms used by the agency in the collection of personal information, and the name, title, business address, and telephone number of the individual immediately responsible for complying with this section.
Therefore, to collect cookie information from participants in Hawaii, you must ensure that you comply with the above requirements and submit an annual report to the council if you maintain one or more personal information systems [1.2].
Source(s):
Jurisdiction
Hawaii