City Council:
AN ORDINANCE ADOPTING THE CITY OF
MOUNT VERNON POLICY FOR SAFEGUARDING
PERSONALLY IDENTIFIABLE INFORMATION (PII)
IN COMPLIANCE WITH THE NEW YORK STATE
SHIELD ACT, HIPAA, THE NEW YORK PERSONAL
PRIVACY PROTECTION LAW, AND OTHER
APPLICABLE PRIVACY LAWS
Whereas, in correspondence dated July 9, 2026, the Commissioner of the Department of Management Services requested that the City Council adopt the City of Mount Vernon Policy for Safeguarding Personally Identifiable Information (PII) to establish uniform administrative, technical, and physical safeguards for the protection of confidential and sensitive information maintained by the City; and
Whereas, the City of Mount Vernon collects, processes, stores, transmits, and maintains personally identifiable information relating to residents, employees, contractors, vendors, volunteers, and visitors while providing municipal services and carrying out governmental functions; and
Whereas, the New York State Stop Hacks and Improve Electronic Data Security (SHIELD) Act requires public entities and organizations that own or license private information of New York residents to implement reasonable administrative, technical, and physical safeguards to protect such information from unauthorized access, disclosure, alteration, or destruction; and
Whereas, the proposed Policy is further designed to comply with the Health Insurance Portability and Accountability Act (HIPAA), the New York Personal Privacy Protection Law, applicable provisions of the New York Freedom of Information Law (FOIL), and other applicable federal and state privacy and information security laws; and
Whereas, the proposed Policy complements the City's existing Computer System Security Breach Notification Policy adopted pursuant to Section 208 of the New York State Technology Law by establishing preventative safeguards intended to reduce the likelihood of unauthorized access or security incidents before they occur; a...
Click here for full text