§30-1-12a. Prohibition against disclosure of personally identifiable information; exceptions.

(a) Definitions. —

 "Personally identifiable information" or "PII" means any information that identifies, or can be used to identify, locate, contact, or impersonate a particular individual.

"Sensitive PII" means those elements of PII that must receive heightened protection due to legal or policy requirements, including, but not limited to:

(1) Social Security numbers;

(2) Credit card numbers;

(3) Health and medical data;

(4) Driver’s License numbers; and

(5) Individual financial account numbers.

(b) A board may not disclose sensitive PII of applicants, licensees, registrants, or other individuals except as necessary to comply with West Virginia or federal law, court order, or subpoena.

(c) Nothing in §30-1-12 or §30-1-12a of this code shall prohibit a board from providing information related to the qualifications and practice of licensees and registrants on the board’s website, including but not limited to educational and training qualifications, specialties, and practice addresses.