Idaho Statutes Title 19. Criminal Procedure § 19-4804. Data oversight council

(1) There is hereby created in the office of the state controller the data oversight council. All requests for projects, reports, and data analyses generated from the criminal justice integrated data system must be approved by the data oversight council.

(2) The data oversight council shall be comprised of:

(3) Any designee under subsection (2) of this section must be an employee in the office, agency, or department of his respective designating authority. Members of the data oversight council shall serve without any additional compensation or honorarium.

(4) The data oversight council, by majority vote, shall elect a chairman and vice chairman among its members who shall serve a term of two (2) years while serving on the council.

(5) All meetings of the data oversight council shall be held in compliance with the open meetings law as provided in chapter 2, title 74, Idaho Code.

(6) The state controller shall work in collaboration with the data oversight council to manage the criminal justice integrated data system. It shall be the duty of the state controller, in conjunction with the data oversight council, to assure confidentiality of all records and data collected by the criminal justice integrated data system and to assure compliance with applicable state and federal laws and rules governing the privacy of records, data, and personal identifiable information.

(7) Any projects, reports, or data analyses in final form produced by persons authorized to conduct research and analyses under this chapter shall belong to the requesting local government or state agency or department and not the office of the state controller.

(8) The Idaho legislature, as well as the contributing state agencies and departments and local governments, shall have priority in requesting any projects, reports, or data analyses to be produced by persons authorized by the data oversight council. The data oversight council may, in its discretion, deny any requested project, report, or data analysis where it determines the request is unduly burdensome, voluminous, or cost-prohibitive.

(9) The office of the state controller, members of the data oversight council, and all contributing local governments, state agencies and departments, or volunteer nongovernmental entities shall be immune from liability to any person or entity for any invasion of the right to privacy or use of records or data generated by the criminal justice integrated data system.

(10) In collaboration with contributing local governments, state agencies and departments, or volunteer nongovernmental entities and the data oversight council, the state controller may establish policies addressing the creation of reports generated through the query of records and data possessed by the criminal justice integrated data system. Provided, however, contributing volunteer nongovernmental entities may collaborate only with respect to the data or information contributed by that volunteer nongovernmental entity.