Next in line for the Exploring Series is exploring regulated information. That is information that is governed by law and punishable by fines or other sanctions if there are data breaches or compliance issues. This is a measure to get organizations to protect data that belong in certain bins.
By binning, I'm simply referring to the ability to identify categories of data. For example, someone should be able to look at a file and say “That's patient health information” or “That's credit card information” and be able to keep it safe accordingly.
Criminal Justice Information
First up in defining regulated information is looking at what makes Criminal Justice Information System (CJIS) data. CJIS data is made of Criminal History Record Information (CHRI).
Files That Contain CHRI
- Gang files
- Historical protection order files of the NCIC
- Identity theft files
- Immigration violator (formerly the Deported Felon File)
- Known or appropriately suspected terrorist files
- National sex offender registry files
- NICS denied transactions file
- Person with information (PWI) data in the missing person files
- Protective interest files
- Supervised release files
- Violent person file
Identification Data That Can Be Included in CHRI
- Birth Date
- FBI and state identification numbers (SID) from each state that has data on the individual
CJIS data is governed by the CJIS Security Policy (CSP) from the FBI. Data flows from the FBI to CJIS Systems Agencies (CSAs), which vary by state. Local agencies connect to the CJIS network through state CSAs. Access to Criminal Justice Information is monitored and only disseminated to authorized individuals.
The preceding information is public information as well as the CSP document on the FBI's website. If you don't need to follow the CSP and get bored, check it out. It's actually an interesting read, provided you can keep up with an ever-increasing amount of acronyms.
It's a Federal document after all.
Have you looked at the CSP? Do you think it's as open and fair as the FBI claims it to be?