2.2-3801 - Definitions.

§ 2.2-3801. Definitions.

As used in this chapter, unless the context requires a different meaning:

"Agency" means any agency, authority, board, department, division,commission, institution, bureau, or like governmental entity of theCommonwealth or of any unit of local government including counties, cities,towns, regional governments, and the departments thereof, and includesconstitutional officers, except as otherwise expressly provided by law."Agency" shall also include any entity, whether public or private, withwhich any of the foregoing has entered into a contractual relationship forthe operation of a system of personal information to accomplish an agencyfunction. Any such entity included in this definition by reason of acontractual relationship shall only be deemed an agency as relates toservices performed pursuant to that contractual relationship, provided thatif any such entity is a consumer reporting agency, it shall be deemed to havesatisfied all of the requirements of this chapter if it fully complies withthe requirements of the Federal Fair Credit Reporting Act as applicable toservices performed pursuant to such contractual relationship.

"Data subject" means an individual about whom personal information isindexed or may be located under his name, personal number, or otheridentifiable particulars, in an information system.

"Disseminate" means to release, transfer, or otherwise communicateinformation orally, in writing, or by electronic means.

"Information system" means the total components and operations of arecord-keeping process, including information collected or managed by meansof computer networks and the Internet, whether automated or manual,containing personal information and the name, personal number, or otheridentifying particulars of a data subject.

"Personal information" means all information that (i) describes, locates orindexes anything about an individual including, but not limited to, hissocial security number, driver's license number, agency-issued identificationnumber, student identification number, real or personal property holdingsderived from tax returns, and his education, financial transactions, medicalhistory, ancestry, religion, political ideology, criminal or employmentrecord, or (ii) affords a basis for inferring personal characteristics, suchas finger and voice prints, photographs, or things done by or to suchindividual; and the record of his presence, registration, or membership in anorganization or activity, or admission to an institution. "Personalinformation" shall not include routine information maintained for thepurpose of internal office administration whose use could not be such as toaffect adversely any data subject nor does the term include real estateassessment information.

"Purge" means to obliterate information completely from the transient,permanent, or archival records of an agency.

(1976, c. 597, § 2.1-379; 1983, c. 372; 1999, c. 41; 2001, c. 844; 2003, c.272; 2006, c. 474; 2008, cc. 840, 843; 2009, cc. 849, 867.)