Privacy council finalizes annual privacy-impact assessment, asks counties to submit missing materials

The Information Privacy and Security Council voted unanimously to finalize its annual privacy impact assessment (PIA) report, pending corrections from the City & County of Honolulu, and to route the document for signatures and submission to the state legislature.

The chair presented the draft PIA, which the council has posted to its public website as the current report, and described it as a catalog of what departments submitted. "The report itself is just provided a catalog of what's been submitted," the chair said, adding staff will review pending bills and revise questionnaires to better align with proposed changes to the definition of personal information.

Council member Steven Courtney told the group that Honolulu had submitted materials that did not appear to be registered in the draft. "We did I guess, we did do a submission back on September 16," Courtney said, and he noted the submission was sent to the council email address. The chair said staff would investigate and revise the report as appropriate.

The chair moved to finalize the report pending those corrections and route it for signature and submission to the legislature; the motion was seconded and carried unanimously. The council emphasized the draft’s limited scope: it summarizes participation (who completed forms), but does not analyze underlying data collections. The chair asked staff to work with internal IT governance to prioritize review of higher‑risk applications and to extract more useful information about personal data in future PIAs.

Next steps specified in the meeting: staff will check the reported Sept. 16 submission from Honolulu, update the cataloged entries, incorporate any agreed corrections, finalize signatures, and submit the PIA to meet annual reporting deadlines. No specific filing date was announced at the meeting.