Request for Records on Data Breaches Affecting State Residents (Virginia State Police) • MuckRock

4 Communications
0 Files

Communications

From: Tom Nash

09/28/2020

Subject: Virginia Freedom of Information Act Request: Request for Records on Data Breaches Affecting State Residents (Virginia State Police)

Portal

To Whom It May Concern:

Pursuant to the Virginia Freedom of Information Act, I hereby request the following records:

Under the Virginia Freedom of Information Act, §2.2-3704 et seq., I am requesting an opportunity to obtain copies of public records that the Virginia Attorney General collects to monitor data breach notification reports affecting Virginia residents. This breach notification is mandatory under Va. Code §§ 18.2-186.6 that states that "In the event an individual or entity provides notice to more than 1,000 persons at one time pursuant to this section, the individual or entity shall notify, without unreasonable delay, the Office of the Attorney General..."

Under the Freedom of Information Act, I would like to request an export of the database Virginia's Office of Attorney General uses to monitor these notification reports. Specific attributes of interest would include: company name, date of breach, date of reporting, individuals affected in Virginia, total individuals affected, industry of affected business, type of breach (hacking, theft, etc.), type of information (name, act#, password), a textual description, etc. A model of the data I'm using from North Carolina is posted here: https://iapp.org/media/pdf/resource_center/North_Carolina_State_Data_Breaches.pdf. Records would be requested in full to include all years of collection, as well as any non-PII metadata. However, as regulations or law may necessitate further redaction, please provide "segregable" data wherever possible. Ideally records would be shared in an excel or .csv file format or another machine readable format.

I request a waiver of fees if possible. If fees for search and processing are expected to exceed $40 please contact me before proceeding. I intend for these records to be employed in academic research, which will produce quantitative comparative analysis of state reported data breaches. This research is in the public interest as it will advance our understanding of the nature of cybersecurity threats directed at the American private sector. Thank you for your consideration of this request.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 5 business days, as the statute requires.

Please note that I am a citizen of Virginia, and am using MuckRock's services to help manage and track my request.

Sincerely,

Tom Nash

From:

10/12/2020

Subject: [ACTION REQUIRED] Your Virginia State Police public records portal account

Use this to confirm your account. The link is only valid for 24 hours.

Virginia State Police

************************************************************************
Hello Tom Nash!
************************************************************************

You can confirm your Virginia State Police public records portal account by copying and pasting the URL below into your web browser. This link is only valid for the next 24 hours.

Magic link: http://vsp.nextrequest.com/users/confirmation?confirmation_token=Cy_R2JoAyKKTdp4dA6Ty

************************************************************************
Questions? Check out our help page (https://www.nextrequest.com/support) or email us at support@nextrequest.com.
************************************************************************

From:

10/12/2020

Subject: Your first record request #20-3454 has been opened.

Virginia State Police

************************************************************************

Hi there

Your first Virginia State Police record request (request number #20-3454) has been submitted.
It is currently unpublished and is not available for the general public to view.

Thank you for your request to the Virginia Department of State Police (the Department). The Department will work to process your request and make a response to you according to the nature of the request.

Please refer to https://www.vsp.virginia.gov/Freedom_of_Information.shtm for helpful information about the Virginia Freedom of Information Act or access the Code of Virginia at https://law.lis.virginia.gov/vacodepopularnames/virginia-freedom-of-information-act/

As the requester, you can always see the status of your
request by signing into the Virginia State Police Public Records
portal here.

If you haven't already activated your account,
click here to get started.
Once your account is activated, your request will be visible at the following link:
Request #20-3454.

************************************************************************
Questions about your request? Reply to this email or sign in to contact staff at Virginia State Police. Technical support: See our <a href='https://www.nextrequest.com/support'>help page</a>

From: Virginia State Police

10/14/2020

Subject: Your Virginia State Police public records request #20-3454 has been closed.

Portal

Virginia State Police

************************************************************************

Hi there

Record request #20-3454 has been closed. The closure reason supplied was:

Thank you for your correspondence to the Virginia Department of State Police (the Department).

Pursuant to Virginia Code § 2.2-3704(B)(3), the requested records "copies of public records that the Virginia Attorney General collects to monitor data breach notification reports affecting Virginia residents" could not be found or do not exist in the Department's files. The Department only houses reports for cases it has investigated, not those conducted by other agencies. We recommend you contact:

Office of the Attorney General

202 North Ninth StreetRichmond, Virginia 23219
(804)786-2071

We regret we are unable to assist you further in this matter but hope the information provided is helpful.

Files

There are no files associated with this request.

Submitted	Sept. 28, 2020
Est. Completion	None

Tracking #	20-3454
Multi Request	Request for Records on Data Breaches Affecting State Residents