Privacy Policy

Overview

The California Board of State and Community Corrections (BSCC) is committed to promoting and protecting the privacy rights of individuals as described in Article 1 of the California Constitution, the Information Practices Act of 1977 (IPA), and other state and federal laws. We communicate the purpose for which the information will be used, at or prior to the time of collection. Any subsequent use will be consistent with the original purpose. We will not disclose your personal data without your consent, unless authorized by law. We use secure technologies to protect all your information from unauthorized viewing by either internal or external sources. Personal information refers to personally identifiable information or other documentary material regardless of physical form or characteristic that is received, owned, used, or produced by BSCC. Our policies regarding the personal information we collect and manage are governed by law, including the IPA (Civ. Code, § 1798 et seq.).

It is the policy of BSCC to limit the collection of personal information and to safeguard the privacy of personal information that we collect or maintain. BSCC’s information management practices are governed by the requirements of the IPA (Civ. Code, § 1798 et seq.), the Public Records Act (Gov. Code, § 7920.000 et seq.), Government Code sections 11015.5 and 11019.9, article 5 (commencing at section 350.02) of Title 13 of the California Code of Regulations and other applicable laws pertaining to information privacy.

BSCC follows these principles in collecting and managing personal information:

  1. BSCC limits the collection of personal information to what is relevant and necessary to accomplish the lawful purpose of BSCC. Personal information will not be disclosed, made available, or otherwise used for purposes other than those specified at the time of collection, except with the consent of the subject of the data, or as authorized by law.
  2. Personal information, as defined in the IPA, is information that identifies or describes an individual including, but not limited to, name, Social Security number, physical description, home address, home telephone number, education, financial matters and medical or employment history. BSCC only collects the personal information that is appropriate for the type of service requested.
  3. BSCC does not collect e-mail addresses, or account information from persons who simply browse our website. The information BSCC automatically collects includes your domain name or IP address, the type of browser and operating system you used, date and time you visited the site, web pages you visited and any forms you downloaded or submitted. This information is collected for customer service and audit purposes. Electronically collected personal information is exempt from requests made under the Public Records Act.
  4. IP addresses that are collected using cookies are for aggregate statistics.
  5. BSCC does not distribute or sell any electronically collected personal information about users to any third party without the user’s written consent. However, BSCC maintains the right to transfer users electronically collected personal information to its contractors pursuant to a valid contract for the collection, maintenance, storage, or use of ECPI, where the contractor agrees to adhere to the requirements of the IPA. (Civ. Code, § 1798.19.)

The Public Records Act exists to ensure that government is open and that the public has a right to have access to appropriate records and information possessed by state government. At the same time, there are exceptions in both state and federal law to the public’s right to access public records. These exceptions serve various needs including maintaining the privacy of individuals. In the event of a conflict between this policy and the Public Records Act, the Information Practices Act or other law governing the disclosure of records, the applicable law will control.

Protecting your privacy

BSCC has security measures in place to protect against loss, unauthorized access, use, modification, or disclosure of the information under its control. We use securie technologies to protect all of your information on our entire website from unauthorized viewing or corruption, by either internal or external sources. Personal information is stored in secure locations. Our staff are trained on procedures for the management and release of personal information, and access to personal information is limited to those staff whose work requires it.

There are things you can do to protect your privacy. Be sure to update your browser and operating system regularly. For more information on how you can protect your privacy, visit the Privacy Enforcement and Protection page on the Office of the Attorney General website.

Any information we acquire, including information collected on our website, may be released if requested and authorized under the IPA (Civ. Code, § 1798 et seq.).

Electronically collected personal information is exempt from disclosure when requested under the California Public Records Act (Gov. Code, § 7920.000 et seq.).

This policy is revised and effective May 13, 2025. Please note that our Privacy Policy reflects BSCC’s current business practices and changes will be reflected on the website.