FORT RUCKER, Ala. (Feb. 12, 2016) -- As more and more parts of people's lives shift online, protecting personally identifiable information can become increasingly difficult, but Fort Rucker officials want to remind people that it still comes down to personal responsibility.
PII is any combination of information that can be used to identify a person, according to Walter Kramer, director of Fort Rucker Directorate of Human Resources.
One of the most familiar PII violations is identity theft, said Kramer, adding that when people are careless with information, such as their Social Security number and date of birth, they can easily become the victim of the crime.
A person with any combination of that information has the potential to violate another's PII, he said, but oftentimes, people are careless with their own information.
Over the last few years, the DHR Administrative Services Division has had all Fort Rucker forms reviewed by the originating office to have the SSN removed or provide a justification to retain it to help in that regard, said the HR director. When the effort began, there were 77 Fort Rucker forms that required SSNs and other PII information, but after the most recent review conducted in May, that number has been reduced to only six forms that have a requirement to retain the SSN.
One of the biggest mistakes people make is assuming that recycling bins are save to dispose of PII in, the HR director said.
"Those bins are not to be used for placing any type of PII in because what is in those bins doesn't go from their office to a shredder," he said. "Once it goes into a recycling bin, that information is no longer protected."
Any type of information that is disposed of in the recycling bins has the potential to be viewed by anyone with access to the bins. From the office, that information can travel miles to the recycling center where it is picked up by an organization outside Fort Rucker.
"People are cleaning out their files and not thinking about what could happen putting that information into the recycle bin," he said.
Kramer said that many people also seem to be under the misunderstanding that if the files they are throwing out are old, then they have no pertinent information in them. Regardless of how old they are, if the files or documents have any type of PII on them, they need to be destroyed properly by shredding, he added.
Most of the organizations and offices on post have shredding machines, and the installation has a high-volume disintegrator run by the security office that is available to use at the recycling center, he said, so people have no excuse not to properly destroy PII documents.
"We use a disintegrator for paper that will shred documents and turn them into briquettes," said Linda Green, security assistant for the Fort Rucker security division.
Essentially, the high-volume disintegrator turns paper into dust and compacts it into briquettes that the recycling center sells to different customers for various uses, he added.
The recycling center also houses a CD/DVD destroyer, as well as a hard drive degausser and destroyer, said Heather Androlevich, security assistant for the Fort Rucker security division.
The degausser uses high-powered magnets to completely obliterate any data on the hard drives, and for classified hard drives, the hard drives are also physically destroyed to the point they cannot be recovered, she said.
In order to use the equipment, people must take a safety class provided by the security office and set up an appointment at their convenience, and unit training can be accommodated on a case-by-case basis.
To set up a training appointment, people can call 255-3094 or 255-2973.
People found in violation of mishandling PII have the potential to be hit with civil penalties that range from payment of damages and attorney fees to personnel action that can include termination of employment and possible prosecution, according to officials at the Office of the Staff Judge Advocate. Criminal penalties can also be charged from a $5,000 fine to misdemeanor criminal charges if the violation is severe enough.
"PII violations can be a pretty big deal," said Kramer. "It requires intervention on the part of the operational security manager, as well as the security office to assess the situation and that can all take a lot of time."
The bottom line is people need to make sure to protect PII, said the HR director.
Related Links:
USAACE and Fort Rucker on Twitter
Social Sharing