The Department of Administrative Services (DAS) takes seriously the protection of personally identifiable information. This policy provides the requirements for protecting the privacy of people who have personally identifiable information in our databases, electronic and paper files and other records. This policy covers all DAS employees. It also covers contractors who gain access to DAS physical facilities or data or computer systems. This policy lays out basic handling expectations first for all types of personally identifiable information, and second, it provides important additional handling requirements for sensitive personally identifiable information.