Which regulation governs privacy and secure handling of criminal justice information in dispatch workflows?

• A. CJIS and privacy regulations govern privacy and secure handling of information.
• B. HIPAA applies to call centers.
• C. FERPA applies to 9-1-1 logs.
• D. PCI-DSS applies to radio transmissions.

Answer: (A)

In dispatch workflows that handle criminal justice information, the governing guidance is the CJIS Security Policy, along with related privacy regulations. CJIS, overseen by the FBI, sets the requirements for protecting CJI—who may access it, how it’s transmitted and stored, and how it’s logged, audited, and disposed of. It also covers strong authentication, encryption for data in transit and at rest, access controls, incident response, and ongoing training for personnel. This framework directly addresses the privacy and secure handling of criminal justice information encountered in dispatch centers.

HIPAA focuses on protected health information, FERPA on student education records, and PCI-DSS on payment card data. While those regimes are important in their own domains, they do not govern the privacy and security of criminal justice information in dispatch workflows the way CJIS does.