Can I use third-party project management tools that collect personal information in Alaska? What are the requirements?

Based on the context documents, third-party project management tools that collect personal information in Alaska are subject to certain requirements.

Requirements for Use and Disclosure of Information

Under 7 AKAC 85.205, the department will retain control and custody of information submitted under this chapter. The department will disclose that information only in the form of nonidentifying aggregate data and only as allowed under (c) of this section. Subject to (c) of this section, the department will limit the use of identifying information to purposes directly related to the administration of mental health or substance abuse programs. The department will not disclose identifying information under (b) of this section unless the disclosure is specifically authorized by state or federal law.

Requirements for Collection, Use, and Confidentiality of Information

Under 8 AKAC 98.520, the division will collect only personal information which is necessary for the administration of the vocational rehabilitation program. All personal information, including lists of names and addresses and photographs, is confidential. The division will release personal information without the consent of the client for purposes directly related to the administration of the vocational rehabilitation program, including release to any federal or state official who has legal authority to audit or review activities of the division, release to an evaluation or research project, release to the Social Security Administration for the purpose of making eligibility determinations, release to medical personnel in the event of a medical emergency, release to protect the client or others if the division determines that the client is a threat to himself or others, release to settle complaints or other actions taken by the client against the division or its staff, and release for referral purposes if the division determines that release is otherwise necessary for the administration of the vocational rehabilitation program.

General Security Requirements

Under 7 AKAC 85.400, the department will maintain all written or computerized records that are subject to this chapter in a secure room, locked file cabinet, safe, or other similar secure place when not in use. When the records are in use, the department and a provider, including a former provider, shall ensure that access to the records is restricted to persons who are authorized under applicable state or federal law to have access to the records. The department will keep the records in a manner that will permit the review of financial and administrative information with minimal disclosure of clinical information and without disclosure of identifying information except when necessary for a purpose authorized under this chapter, and in accordance with applicable state or federal law.

Access to Confidential Electronic Records

Under 7 AKAC 85.210, the department will allow access to electronic records that contain confidential information only to a provider approved by the department when the provider seeks access to records that it submitted to the department under this chapter or a system and database administrator authorized by the department, if the administrator has read and understands the applicable requirements of state and federal law dealing with confidential information and system security, including 7 AAC 85.200 and other applicable state and federal law.

Based on the above requirements, third-party project management tools that collect personal information in Alaska must comply with the state and federal laws dealing with confidential information and system security. The tools must ensure that access to confidential information is restricted to persons who are authorized under applicable state or federal law to have access to the records. The tools must also maintain the records in a secure place when not in use and keep the records in a manner that will permit the review of financial and administrative information with minimal disclosure of clinical information and without disclosure of identifying information except when necessary for a purpose authorized under this chapter, and in accordance with applicable state or federal law.

It is important to note that the above requirements are specific to the context documents provided and may not be exhaustive. It is recommended that you consult with a legal professional for a comprehensive understanding of the legal requirements for third-party project management tools that collect personal information in Alaska.

Jurisdiction

Alaska

• Privacy