Can I share personal information about my customers with third parties in Kansas? What are the requirements?

Sharing Personal Information of Customers with Third Parties in Kansas

In Kansas, holders of personal information are required to implement and maintain reasonable procedures and practices appropriate to the nature of the information, and exercise reasonable care to protect the personal information from unauthorized access, use, modification, or disclosure ^[1.2]. Therefore, businesses in Kansas must take reasonable steps to protect the personal information of their customers from unauthorized access or disclosure.

Additionally, Kansas law prohibits the sale, giving, or receiving of any list of names and addresses contained in or derived from public records for the purpose of selling or offering for sale any property or service to persons listed therein, except in certain circumstances ^[2.4]. However, this law does not apply to public officials, public agencies, or records custodians who grant access to or provide copies of public records or information containing names and addresses in good faith compliance with the Kansas open records act ^[2.4].

Therefore, businesses in Kansas must take reasonable steps to protect the personal information of their customers from unauthorized access or disclosure, and cannot sell or give lists of names and addresses contained in or derived from public records for the purpose of selling or offering for sale any property or service to persons listed therein, except in certain circumstances ^[1.2][2.4].

Source(s):

• [1.2] Requirements for holders of personal information.
• [2.4] Unlawful use of names derived from public records.

Jurisdiction

Kansas

• Privacy