3
Protecting Resident Council Members Information and Privacy
At times resident councils need to collect personal information from members, particularly contact
information in order to stay in touch with members. Resident councils have a responsibility to safeguard
members’ personally identifiable information whether that information is stored on paper or electronically.
Tips related to the collection of personally identifying information:
• Only collect information about individuals that is relevant and necessary. For example:
»
If the resident council wants to acknowledge members’ birthdays, consider only collecting their
month of birth and not their full birthdate.
»
If demographic information (age, race, employment) is being collected for a survey, consider making
the survey anonymous.
• Ensure that records (electronic and paper) are stored with safeguards, including:
»
Only share and discuss personal information with those who need to know it.
»
Do not distribute personal information, including contact information, to anyone without that person’s
prior agreement. Only consider requests if you are first convinced that the release of contact
information is authorized, proper and necessary.
»
Clearly label all files containing sensitive information (example “for Board use only).
»
Lock up all paper files and media (thumb drive or other electronic storage) containing personal
information in a file cabinet or case.
»
Password protect computers, or specific electronic files, and ensure only people who need the
information have the password.
»
Keep accurate records of where personal information is used and maintained.
»
Restrict access to oces where information is stored by only providing keys to those who need
them to carry-out their roles.
»
Destroy records once they are no longer needed.
Generally, the personal information that resident councils will have is limited to contact information that the
resident willingly provides. If the resident council is carrying out a program or activity that requires more
personal (birthdate, place of birth) or sensitive information (driver’s license number, medical records, etc) the
resident council should consult the housing authority regarding applicable rules and seek training.
Providing Notice to Members
When collecting personally identifying information, the resident council should let members know what
information is needed, why it is needed, and that sharing information is optional.
Example statement:
At times resident councils need to collect personal information from members, particularly contact information
in order to stay in touch. The resident council board takes seriously the responsibility of safeguarding your
personally identifiable information both on paper and electronically. Your information will never be shared
with outside parties without your permission. Providing your personal information, is optional. However, there
are times when sharing personal information will be necessary in order to participate in resident council
activities such as running for the Board or voting in an election.
For more information: Consult your housing authority and/or an attorney (such as someone from Legal Aid).