489—5.14(22) Personally identifiable information. This rule describes the nature and extent of personally identifiable information which is collected, maintained, and retrieved by the agency by personal identifier in record systems. For each record system, this rule describes the legal authority for the collection of that information, the means of storage of that information and indicates whether a data processing system matches, collates, or permits the comparison of personally identifiable information in one record system with personally identifiable information in another record system. The record systems maintained by the agency are:
	1.	Files are maintained by the child’s name in the child advocacy board offices. Those files are kept in locked filing cabinets. (Iowa Code section 237.18(2)“a”)
	2.	The foster care registry (Iowa Code section 237.17) is a computerized tracking system of the children reported to the child advocacy board. The information of each case is personally identifiable by name.
	3.	Personnel files for each employee of the child advocacy board. These may be confidential pursuant to Iowa Code section 22.7(11).
[ARC 1375C, IAB 3/19/14, effective 4/23/14; ARC 6676C, IAB 11/16/22, effective 12/21/22]