Background
The District of Columbia government has created the DC One Card program for two purposes:
- Providing convenience to residents through enabling them to access multiple District programs and services with a single card.
- Producing cost savings for the government by eliminating duplication of credentials and associated maintenance across District agencies.
Scope
This policy applies only to the DC One Card data that is maintained by the Office Of The Chief Technology Officer (OCTO). DC One Card data that is maintained by other District agencies is subject to the privacy policies of those agencies.
Objectives
The objectives of this policy are to:
- Collect only such data from DC One Card users as is necessary to guarantee the uniqueness of each DC One Card, to permit District service agencies to determine whether a user holds a DC One Card, and to indicate what programs/agencies have registered each DC One Card.
- Protect DC One Card data from cyber-intrusion to the maximum extent technologically feasible.
- Limit access to DC One Card data to those individuals who need access for purposes of maintaining the DC One Card database.
Policy
The data collected from DC One Card users and maintained in the DC One Card database shall be limited to the following information, which is necessary to identify the user:
- Contact information: Name, address, telephone number and email address
- Gender
- Date of birth
- Last four digits of Social Security number (if provided)
- District agencies/programs that have registered the particular card
- Card number
- Photograph
Card Activation
For your convenience, DC One Cards can be activated for use at participating agencies. Under no circumstances does the DC One Card program collect or share any data on how, when or where the DC One Card is used. To enable a user’s DC One Card to operate at a participating agency, the following information is sent during activation:
DC Public Libraries (DCPL)
- Contact information: Name, address, telephone number and email address
- Date of birth
- Card number
DC Parks & Recreation Centers (DPR)
- Contact information: Name, address, telephone number and email address
- Date of birth
- Card number
- 4 digits of SSN (if provided)
Please note that by deactivating service at a particular agency, you do not cancel your membership or any outstanding membership responsibilities with that agency. You should review each selected agency’s “Terms and Conditions” regarding membership cancellation.
Washington Metropolitan Area Transit Authority (WMATA) - Applies to Senior SmarTrip® Cards only
- SmarTrip Number
- First Name
- Middle Initial
- Last Name
- Phone Number
- Email Address
- Address
IT Security Protection
OCTO shall apply to the DC One Card database the full range of information technology (IT) security protections that OCTO applies to all other individually identifiable data in its custody.
Access Restrictions
Access to the DC One Card database shall be limited to those database technicians who have a need to access the database for purposes of maintaining it.