Can I collect cookie information from participants in Ohio? What are the requirements?

According to OHAC Rule 122-6-01, personal information that is not a public record for the purposes of section 149.43 of the Revised Code is considered confidential personal information (CPI). CPI includes personal information that is maintained by a personal information system, which is defined as a system that stores, maintains, or retrieves personal information using electronic data processing equipment.

To collect cookie information from participants in Ohio, you must ensure that the information collected does not include CPI. If the cookie information collected includes CPI, you must follow the procedures for accessing confidential personal information outlined in OHAC Rule 122-6-01.

Therefore, it is recommended that you consult with a legal professional to ensure that you are in compliance with all applicable laws and regulations.

Source(s):

• [3.1] Access to confidential personal information.

Jurisdiction

Ohio

• Privacy