Duties of state and local agencies maintaining personal information systems – Ohio Rev. Code Ann. § 1347.05

Every state or local agency that maintains a personal information system must take reasonable precautions to protect personal information in the system from unauthorized modification, destruction, use or disclosure.    Additionally, each agency may collect, maintain, and use personal information only if it is necessary and relevant to the authorized functions of the agency, and must eliminate information from the system when it is no longer necessary and relevant to those functions.