The personal information collection and management policies, practices and procedures implemented by the California Arts Council (CAC) are governed by law; including the California Information Practices Act (Civil Code Section 1798 et seq.)
"Personal information" is information about a natural person that identifies or describes an individual including, but not limited to, his or her name, social security number, physical description, home address, home telephone number, education, financial matters, and medical or employment history, readily identifiable to that specific individual.
Pursuant to Government Code Section 11019.9 and the Information Practices Act, the CAC follows these principles in collecting and managing personal information:
The CAC only gathers personal information through lawful means.
The purposes for which the CAC collects personally identifiable data shall be specified at, or prior to, the time of collection. Any subsequent use of the data shall be limited to the fulfillment of purposes not inconsistent with the purposes specified when collected.
Personal information will not be disclosed, made available, or otherwise used for purposes other than those specified at the time of collection, except with the consent of the subject of the data, or as authorized by law.
The CAC limits the collection of personal information to that information relevant and necessary to accomplish a lawful purpose of the CAC.
The CAC uses security controls to protect personal information against loss, unauthorized access, use, modification or disclosure; such as:
- Personal information is stored in secure locations.
- Staff is trained on procedures for the release of information, and access to personal information is limited to those staff whose work requires it.
- Materials containing personal information are destroyed as specified in the CAC's records retention schedule.
Personal Information Collected from Visitors to the CAC Website:
Electronically Collected Personal Information
Personal information from users of the CAC website may be electronically collected. In accordance with Government Code Section 11015.5, "electronically collected personal information" includes information maintained by an agency that identifies or describes an individual user including, but not limited to, his or her name, social security number, physical description, home address, home telephone number, education, financial matters, medical or employment history, password, electronic mail address, and information that reveals any network location or identity.
The CAC collects limited information from visitors who just browse the CAC website. Only the following “electronically collected personal information” is automatically collected: browser type, date/time, page accessed and IP address of user’s device. Electronically collected personal information does not include information manually submitted by a user, even if submitted in electronic form or information on or relating to individuals who use the CAC website in a business capacity.
With limited exceptions, Government Code Section 11015.5 prohibits the CAC from distributing or selling any "electronically collected personal information" about users to any third party without the user's prior written consent. Accordingly, the CAC does not sell any "electronically collected personal information." Moreover, "electronically collected personal information" is never stored permanently and will be discarded at the request of the user. Users who wish to have their electronically collected information discarded without reuse should contact the CAC Information Security Officer, see below. "Electronically collected personal information" maintained by the CAC is subject to the limitations set forth in the Information Practices Act and is exempt from the Public Records Act's mandatory disclosure for public inspection and copying.
Other Information Collected
The CAC maintains a record of emails received from users of the website including any personal information voluntarily submitted such as the sender's email address. The Public Records Act may require the disclosure of personal information manually submitted to the CAC through an electronic form.
Contacting the California Arts Council:
California Arts Council
Information Security Officer
1300 I Street, Suite 930
Sacramento, California 95814