JLARC preliminarily finds Office of Privacy and Data Protection meets responsibilities but recommends statute updates

The Joint Legislative Audit and Review Committee on Sept. 17 received a preliminary performance review of the Office of Privacy and Data Protection (OPDP) that concluded OPDP generally meets statutory responsibilities and receives high user satisfaction, but that statute and performance measures should be updated to match the office’s capacity and focus.

JLARC auditors Stephanie Seto and Francisco (Francisco San Santam / Francisco Santa Marina in the transcript) summarized OPDP’s work: the office provides privacy guidance and annual privacy reviews for state agencies, conducts trainings and privacy assessments for new IT projects, serves as a resource to some local governments, and maintains public-facing guidance. "The legislative auditor concluded that the Office of Privacy and Data Protection or OPDP meets statutory responsibilities and receives high user satisfaction," Seto said when…