Department of Environmental Conservation

Security Over Personal Information

We audited the collection and maintenance of personal information by the Department of Environmental Conservation. We found that the Department was only collecting personal information from the public which was needed to perform its mission. However, we also determined that the Department needed to take additional steps to better ensure the security of that information. We further determined that the Department might not be fully prepared to follow statutory requirements should personal information in its possession be breached.

For a complete copy of Report 2007-S-76 click here.
For a copy of the 90-day response click here.