Generally, a State agency may not redisclose data received under the terms and conditions
of its data exchange agreement with us without our prior written permission. We will
only permit the redisclosure if it meets the following criteria:
-
•
it is required by law or essential to the conduct of the applicable data exchange
activity, and
-
•
it is authorized under a routine use.
To the extent we approve a requested redisclosure, the State agency will ensure that
any entity receiving the redisclosed data complies with certain requirements in the
data exchange agreement. This includes the procedures and limitations on use, duplication,
and redisclosure of our data; the administrative, technical, and physical security
requirements governing all of the data we provide electronically to the State agency;
and the specific guidance on safeguarding and reporting responsibilities for personally
identifiable information. Refer questions on the proper use and redisclosure of our
data to the regional PAC, as well as to the Office of Privacy and
Disclosure.