Public agencies: information practices.

Existing law, the Information Practices Act of 1977, prescribes a set of requirements, prohibitions, and remedies applicable to public agencies, as defined, with regard to their collection, storage, and disclosure of personal information. The act specifically requires an agency to establish rules of conduct for persons involved in the design, development, operation, disclosure, or maintenance of records containing personal information and to instruct these people with respect to the rules and the requirements of the act. This bill would require that the above-described rules of conduct include security awareness and training policies and procedures.