Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the It Policy topic
No spam. Unsubscribe anytime.
Saginaw County adopts four IT policies including AI governance; board amends disciplinary language
Summary
The Board approved four Information Technology policies on Feb. 17—Mobile Device Management, Web Content Accessibility (WCAG 2.1 AA), Data Classification, and Artificial Intelligence—with a successful amendment removing a sentence about disciplinary action from policy scope language.
The Saginaw County Board of Commissioners voted Feb. 17 to adopt four county IT policies covering mobile device management (Policy 504), web content accessibility (Policy 506), data classification (Policy 507) and artificial intelligence (Policy 508).
During County Services Committee discussion and again on the board floor, Director of Information Technology Andrew Klaczkiewicz reviewed the policies’ goals: secure management of county mobile devices, WCAG 2.1 AA conformance for public web content, formal data-classification categories (Public, Internal, Confidential, Restricted) with encryption and MFA requirements for sensitive data, and governance for procurement and use of AI and Generative AI. Policy 508 requires COSIT review of proposed AI projects and restricts entry of restricted or confidential information to unapproved AI tools.
Commissioner Christopher S. Boyd successfully moved to amend the committee-recommended language in 3.1 by removing the sentence under 'Scope' that read, "Noncompliance with this policy subjects the user to disciplinary action outlined in the County of Saginaw Standards of Conduct." Commissioners said the disciplinary consequence language should be moved to the Standards of Conduct policy rather than each IT policy. After the amendment, the Board approved Policy 504 as amended and then approved the remaining policies.
The web accessibility policy lists concrete requirements for county-owned websites and vendor software, including captions for live video, alt text on images, properly tagged and searchable PDFs, and vendor compliance with WCAG for public-facing systems. The Data Classification Policy formalizes handling for PII, ePHI, PCI, and criminal justice information and references FBI CJIS, HIPAA and PCI DSS standards. The AI policy references the NIST AI Risk Management Framework and Michigan’s Elliott-Larsen Civil Rights Act and requires human review for any AI decision that affects an individual’s rights.
Board records show committee discussions focused on drafting, enforcement placement, and ensuring vendors meet accessibility obligations. The policies and the amended language are on file in the Board Office.
