Sec. 12.15.01.16. Security

A. The Central Repository hereby incorporates by reference the specific federal regulations regarding security of CHRI under 28 CFR §20.20.

B. A criminal justice agency is responsible for reporting a breach of physical or operational security concerning CHRI to the Central Repository.

C. If there is a breach of the physical security of CHRI or a failure to meet physical security standards for CHRI required by federal or State statute or regulation or Central Repository procedures relating to the physical security of CHRI, the Central Repository shall ensure that the breach is corrected.

D. If there is a failure to comply with personnel policies relating to CHRI established by federal or State statute or regulation or Central Repository procedures relating to CHRI, the Central Repository shall ensure that the failure is corrected.

E. If there is a breach of the operational security of the Criminal Justice Information System as defined in Criminal Procedure Article, §10-201(e), Annotated Code of Maryland, or a failure to meet the operating security standards of federal or State statute or regulation or Central Repository procedures relating to the security of CJIS, the Central Repository shall ensure that this breach is corrected.

F. If the privacy or confidentiality of CHRI has been intentionally or inadvertently abused or the potential for abuse exists, the Central Repository shall ensure that the abuse or potential for abuse is corrected.