[Lpk-execomm] Data sharing with campaigns

[Ken Moellman]

All -  I write in my capacity as the IT Director. 

We have several campaigns this year, and I purchased data on behalf of
the party.  The data in the CRM is protected by an NDA which (in theory)
prohibits abuse.  However, due to my schedule in recent months, I
haven't found a 16-hour block of time to re-marge and put the data into
the CRM.  

I've been asked by 2 campaigns to provide a copy of this newly purchased
data outside of the CRM, and I suspect a 3rd campaign in the near
future. This can obviously be done, but I have concerns that this data
is not covered by any data protection.  We have both a legal and ethical
obligation to protect PII (Personally Identifiable Information) and, as
was noted by another person, the issue of protecting PII was discussed
several times on both Day 1 and Day 2 at the most recent state
convention. 

I'm looking to get some guidance on what the executive committee wants
to do about this. If I provide the data with no NDA or data use (and
ideally, data return) policy around the data, I believe this would open
the party up to potential liability, and/or would go against the intent
of our delegates in convention. 

-- 
Ken C. Moellman, Jr. 
4th District Chair
State Party IT Director 
Libertarian Party of Kentucky