Section 601.6. Security

(a) Security requirements. Every criminal justice agency collecting, storing or disseminating intelligence information, investigative information or treatment information shall insure the confidentiality and security of the information by providing that, wherever the information is maintained, the criminal justice agency shall:

(1) Institute procedures to reasonably protect a repository from theft, fire, sabotage, flood, wind or other natural or manmade disasters.

(2) Select, supervise and train personnel authorized to have access to intelligence information, investigative information or treatment information.

(3) Insure that the equipment used for maintaining intelligence information, investigative information or treatment information is dedicated solely to purposes related to the administration of criminal justice. If the equipment is not used solely for the administration of criminal justice, the criminal justice agency is accorded equal management participation in computer operations used to maintain the intelligence information, investigative information or treatment information.

(4) Adopt administrative, technical and physical safeguards, including audit trails, to insure against unauthorized access and against intentional or unintentional damages.

(5) Label information to indicate levels of sensitivity and levels of confidence in the information.

(b) Special requirement for protected information. Access to the intelligence, investigative or treatment information contained in an automated criminal justice system is restricted to the authorized employes of the criminal justice agency and may not be accessed by other individuals inside or outside of the agency except by the process of dissemination.