6VAC35-160-130. Security of telecommunications.
A. The department may permit the use of a nondedicated means of data transmission to access juvenile record information when there are adequate and verifiable safeguards in place to restrict access to juvenile record information to authorized persons. Industry standard levels of encryption shall be required to protect all juvenile record information moving through any network.
B. Where remote access of juvenile record information is permitted, remote access devices must be secure. Remote access devices capable of receiving or transmitting juvenile record information shall be secured during periods of operation. When the remote access device is unattended, the device shall be made inoperable for purposes of accessing juvenile record information by implementing a screen saver lockout period after a maximum of 15 minutes of inactivity for devices as required by COV ITRM Standards SEC 501–09.1. In addition, appropriate identification of the remote access device operator shall be required.
C. The telecommunications connection used with the remote access device shall also be secured. Telecommunications connections shall be reasonably protected from possible tampering or tapping.
Statutory Authority
§§ 16.1-223 and 66-10 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 20, Issue 23, eff. August 25, 2004; amended, Virginia Register Volume 33, Issue 26, eff. September 20, 2017.