Section 2: Identifying Information Types
TxDOT’s records are a vital and important information asset and must be protected against unauthorized access, use, disclosure, loss, modification/corruption, or unauthorized disposal. For additional information see the TxDOT Data Classification Policy.
Anchor: #i1000051Confidential Information
Confidential records must be protected from creation through final disposition. Any official record, convenience copy, or transitory information can contain confidential information regardless of the media. TxDOT employees who handle or have access to confidential records have a duty to safeguard and protect the information.
“Confidential Information” has the meaning provided in 1 Texas Administrative Code § 202.1(5), which states the confidential information means “information that must be protected from unauthorized disclosure or public release based on published laws or legal agreements.” Information that is Confidential Information under this definition may include:
(a) Attorney-Client communications.
(b) Drafts of policymaking documents.
(c) Information related to pending litigation.
(d) Audit working papers.
(e) Competitive bidding information before contract awarded.
(f) Sensitive Personal Information.
(g) Regulated data.
(h) Information excepted from disclosure requirements of Chapter 552 of the Texas Government Code (“Public Information Act”) or other applicable state or federal law
(i) Compliance reports for which the Texas Attorney General has granted permission to withhold.
(j) Investigative working papers and draft reports excepted from disclosure under Section 552.116 of the Texas Government Code.
Anchor: #i1000128Sensitive Data
Means information that could be subject to release under an open records requests, but should be controlled to protect third parties, and should be vetted and verified before release. At TxDOT, this could include operational information, personnel records, research, or internal communications.
- Anchor: #WICHXFRA
- More examples of sensitive information include, but are not limited to: Anchor: #DYCXHPPA
- Plans and Specifications Anchor: #MRLWSWDB
- Costs/Financial Data Anchor: #QFYAIEUP
- Bids Anchor: #KWMFARLE
- Personal Identifying Information
Sensitive Personal Information (SPI)
Sensitive Personal Information has the meaning provided by Texas Business and Commerce Code 521.002 of the Texas Government Code, which defines sensitive personal information as:
- Anchor: #XVOVNTNN
- An individual’s first name or first initial and last name in combination with any one or more of the following items, if the name and item are not encrypted: Anchor: #APVAPDJU
- Social Security Number Anchor: #FOHMLYYT
- Driver’s license number or government-issued identification number; or Anchor: #FXAIAKML
- Account number or credit or debit card number in combination with any required security code, access code, or password that would permit access to an individual’s financial account
Information that identifies an individual and relates to:
- Anchor: #MDSLOOQY
- The physical or mental health or condition of the individual. Anchor: #KFMEMXOU
- The provision of health care to the individual. Anchor: #ISGKCXCT
- Payment for the provision of health care to the individual.
Personal Identifying Information (PII)
Personal Identifying Information is subject to Texas Government Code, Chapter 552, Title 5 Open Government; Ethics, “Public Information” and Texas Business and Commerce Code 521.002, “Unauthorized Use of Identifying Information”.
Personal Identifying Information is information about an individual that can be used to distinguish or trace an individual’s identity. This can include medical, education, financial, and employment information. Personal Identifying Information can either exist as stand-alone content or can be groups of content.
“Personal Identifying Information” means information that alone or in conjunction with other information identifies an individual, including an individual's:
(a) Name, social security number, date of birth, or government-issued identification number.
(b) Mother's maiden name.
(c) Unique biometric data, including the individual's fingerprint, voice print, and retina or iris image.
(d) Unique electronic identification number, address, or routing code.