§ 59-8. Data protection requirements.

(a)

The CCA administrator may request the distribution utility's aggregated customer information on all participating consumers in the village.

(b)

Customer specific data shall be protected in a manner compliant with, collectively:

(1)

All national, state and local laws, regulations or other government standards relating to the protection of information that identifies or can be used to identify an individual that apply with respect to the village or its representative's processing of confidential utility information;

(2)

The utility's internal requirements and procedures relating to the protection of information that identifies or can be used to identify an individual that apply with respect to the village or its representative's processing of confidential utility information; and

(3)

The CCA order and PSC rules, regulations and guidelines relating to confidential data.

(c)

The village must enter into a data security agreement with the distribution utility for the purpose of protecting customer data.

(L.L. No. 6-2016, § 8, 11-21-16)