Ask Reggi Your Question Now
Can I use third-party cloud storage services that collect personal information in Idaho? What are the requirements?
Using Third-Party Cloud Storage Services that Collect Personal Information in Idaho
If a third-party cloud storage service collects personal information about residents of Idaho, they must comply with the Disclosure of Breach of Security of Computerized Personal Information by an Agency, Individual or a Commercial Entity law [1.1]. Additionally, if the service discloses nonpublic personal financial information to a nonaffiliated third party, they must comply with the Limits on Disclosure of Nonpublic Personal Financial Information to Nonaffiliated Third Parties law [3.2].
However, the documents do not provide specific requirements for using third-party cloud storage services that collect personal information in Idaho.
Accessing Personal Records in Idaho
If you are concerned about your personal information being stored on a third-party cloud storage service, you may have the right to access and amend your records. According to Idaho law, a person may inspect and copy the records of a public agency pertaining to that person, even if the record is otherwise exempt from public disclosure [4.1]. Additionally, records that contain non-identifying information may be disclosed for Department-approved research or other purposes without a written authorization [2.2].
Conclusion
In summary, third-party cloud storage services that collect personal information in Idaho must comply with certain laws regarding the disclosure of personal information. However, there are no specific requirements for using these services in Idaho. If you are concerned about your personal information being stored on a third-party cloud storage service, you may have the right to access and amend your records.
Source(s):
- [1.1] DISCLOSURE OF BREACH OF SECURITY OF COMPUTERIZED PERSONAL INFORMATION BY AN AGENCY, INDIVIDUAL OR A COMMERCIAL ENTITY.
- [3.2] LIMITS ON DISCLOSURE OF NONPUBLIC PERSONAL FINANCIAL INFORMATION TO NONAFFILIATED THIRD PARTIES.
- [4.1] ACCESS TO RECORDS ABOUT A PERSON BY A PERSON.
- [2.2] DATA FOR RESEARCH OR OTHER PURPOSES.
Jurisdiction
Idaho