The federal and state statutes, regulations, acts, and administrative rules listed in this rule are available for inspection and copying at most public libraries and "The State Library of Ohio." For materials subject to change, the material listed in this rule shall be as of the most current publication of the Ohio Revised Code, the United States Code, and the Ohio Administrative Code.
(A) The following federal and state statutes, regulations, acts, and administrative rules make personal information maintained by the "Department" confidential, and identify confidential personal information within the scope of rules promulgated by this "Department" in accordance with section 1347.15 of the Revised Code:
(1) Social security numbers: 5 U.S.C. 552(a), federal Privacy Act of 1974 (2015), unless the individual was told that the number would be disclosed;
(B) In addition, the following is a non-exhaustive list of federal statutes or regulations or state statutes and administrative rules making personal information maintained by each division confidential:
(a) Health Insurance Portability and Accountability Act (HIPAA) of 1996, Pub. L. No. 104-191, 29 U.S.C. 1181(2015);
(b) The Americans with Disabilities Act (ADA) of 1990, 5 U.S.C. 8905a(2015);
(c) The Family and Medical Leave Act (FMLA) of 1993, 29 U.S.C. 2601(2015).
(2) Ohio bureau of motor vehicles:
(a) The federal Driver's Privacy Protection Act (DPPA), 18 U.S.C. 2721 - 2725(2015);
(3) Ohio emergency management agency:
(a) The federal Freedom of Information/Privacy Act, 5 U.S.C. 552a(2015), applies to all federal and disaster assistance grants administered by the agency;
(b) Public assistance and individuals and households disaster grant programs administered by the federal emergency management agency (FEMA), 42 U.S.C. Chapter 68 (2015);
(c) The Robert T. Stafford Disaster Relief and Emergency Assistance Act, 42 U.S.C. 5121, et seq (2015);
(d) Applicable secure areas and communications systems regulations, including but not limited to 49 C.F.R. Part 1520 and 32 C.F.R. Part 2001 (2015);
(e) Health Insurance Portability and Accountability Act (HIPAA) of 1996, Pub. L. No. 104-191, 29 U.S.C. 1181(2015).
(f) Federal grants agreements requirements in 2 C.F.R. part 200 (2015).
(4) Ohio emergency medical services:
(i) Medical records;
(ii) EMT and firefighter residential and familial information;
(iii) Confidential law enforcement investigatory records.
(c) Section 4765.06 of the Revised Code makes specific exemptions for information that identifies or tends to identify a specific recipient or provider of emergency medical services or adult or pediatric trauma care;
(d) Health Insurance Portability and Accountability Act (HIPAA) of 1996, Pub. L. No. 104-191, 29 U.S.C. 1181(2015);
(e) The Americans with Disabilities Act (ADA) of 1990, 5 U.S.C. 8905a(2015).
(5) Ohio homeland security:
(a) Protections of criminal intelligence, 28 C.F.R. part 23 (2015);
(6) Ohio private investigator and security guard services:
(b) Section 149.43 of the Revised Code, peace officer, parole officer, probation officer, bailiff, prosecuting attorney, assistant prosecuting attorney, correctional employee, community-based correctional facility employee, youth services employee, firefighter, EMT, or investigator of the bureau of criminal identification and investigation residential and familial information.