Section 7. County Property and Electronic Services Policy
This policy applies to all County property, whether tangible or intangible, including desks, lockers, filing cabinets, electronic equipment, media, services, and new technologies as they emerge, including but not limited to, computers, e-mail, telephones, cell phones, tablets, voicemail, fax machines, copiers, radios and wireless devices, wire services, and on-line services, including County Wi-Fi and the Internet, that are:
• County property;
• accessed using County computer equipment or your own, via County-paid access methods; and/or
• used in a manner that identifies the individual as a County employee.
With the rapidly changing nature of technology, this policy cannot provide guidelines for every possible situation. Instead, it expresses the County’s philosophy and sets forth general principles. For more detailed, technology-specific requirements see the IT Security Policies and follow them at all times.
7.02 GENERAL PRINCIPLES
7.021 Use County Assets Wisely
The County’s assets are intended to be used primarily for the benefit of the County. Protect these assets and use them wisely.
7.022 No Expectation of Privacy
You have no expectation of privacy in the workplace, in your work-related conduct, in the use of County-owned or County-provided equipment or supplies, or anything you create, store, send, or receive on the County computer system. Assume that what you do while on duty or using County equipment is not private. Although searches are normally not conducted without a valid reason, all work areas and county equipment, such as desks, files, lockers (even if you provide a lock), computers, devices, and electronic media are subject to search at any time.
7.023 County Assets must be Returned Upon Employment Separation Harris County assets must be returned within 72 hours of separation of employment. Employees who separate employment may be held responsible for the fair market value of any unreturned hardware, incomplete hardware or damaged hardware. Failure or refusal to return assets may result in deductions from final pay and/or accrued compensable leave balances.
7.03 MONITORING PRACTICES
7.031 Generally, we do not monitor electronic information you create or communicate by e-mail, word processing, utility programs, spreadsheets, voicemail, telephones, Internet access, etc. However, we routinely monitor:
a. Usage patterns for voice and data communications (e.g. website accessed, length, time of day) for cost analysis, cost allocation, and to manage the County’s gateway to the Internet. We also monitor the County network and computer systems for security incidents, patterns of unauthorized use, data leakage events, and other malicious activity that may present a potential threat to the County’s information and information resources.
b. To the extent allowed by law, County officials, Department Heads, and others are permitted to review your electronic files, messages, and usage to ensure compliance with the law and current County policies.
7.04 CYBERSECURITY ANNUAL TRAINING REQUIREMENT
7.041 Subject to the amendment of Texas Government Code Ann. § 2054.5191, the State of Texas requires Harris County to:
7.0411 Identify all Harris County employees, including elected and appointed officials, with access to a local government computer system or database and use a computer to perform at least 25 percent of their required duties.
7.0412 Require identified Harris County employees, including elected and appointed officials, to complete an annual certified cybersecurity training program.
7.0413 Harris County is required to verify and report the completion of a cybersecurity training program by employees and elected and appointed officials to the State of Texas by the at the end of the program year.
7.0414 Harris County is required to conduct periodic audits to ensure compliance with the statute.
Employees who do not complete the required annual cybersecurity training may have computer access denied.
7.05 PUBLIC INFORMATION ACT
7.051 Any Public Information Act (PIA) requests received should be forwarded to your department’s PIA Officer and the Assistant County Attorney’s designated Public Information Officer (PIO).
7.052 Emails, texts, and other electronic communications related to official County business are subject to the Public Information Act (PIA) regardless of where they are stored. Thus, if you use your personal cell phone or tablet to conduct County business or your personal email account to send or receive messages related to County business, that personal device or account may be subject to inspection to respond to a request for information under the PIA. The best practice is to use County email for all County business. If you must use your personal email account for County business, send a copy of the message to your Harris County account. To comply with records retention laws, all County business messages must be stored on a County email account no matter where the email originated.
7.053 If you text anything about County business other than transitory information, copy the text to your county email account. Texts to set up a meeting, say you are running late, or asking someone to call you are examples of transitory information.
7.06 E-MAIL AND INTERNET ACCESS
Harris County provides e-mail, internet access, and access to other electronic forms of communication and information exchange to make communication more efficient and effective and because they are valuable sources of information for government-related work. We may limit and/or decrease Internet connection speeds, block Internet content, and remove Internet access for any individual or group deemed appropriate to enable availability and performance for critical County services.
7.061 Acceptable Uses
These are some of the acceptable uses of information technology.
• Communication and information exchange directly related to your job.
• Communication for professional development, to obtain continuing education or training, or to discuss issues related to your job.
• At the Department Head’s discretion, you can use electronic media for incidental or de minimis personal matters.
We do not want to search your personal computer, cell phone, or email account for public information, but if we get a request under the PIA or in a discovery request during litigation involving the County, we may be required to do it.
7.062 Unacceptable Uses
These are some of the unacceptable uses of information technology.
• Knowingly transmitting, retrieving, or storing any communications that are discriminatory or harassing; derogatory toward any individual or group; obscene; defamatory or threatening; “chain letters”; or for any other purpose that is illegal or against County policy.
• Use for any personal profit or political gain.
• Use for purposes not directly related to your job whether before, after, or during normal business hours, unless your Department Head allows minimal personal use.
• Use to copy, retrieve, or forward copyrighted material (such as software, database files, documentation, articles, graphics files, and downloaded information) unless you have the right to copy or distribute such material.
• Attempts to read, “hack” into other systems, or “crack” passwords, or breach computer or network security measures.
• Use that attempts to hide the identity of the sender or represents the sender as someone else.
• Development of programs designed to harass other users or infiltrate a computer or computer network or to damage or alter hardware or software.
• Deliberately wasting computer resources or unfairly monopolizing resources, including, but not limited to, sending mass mailings or chain letters, spending excessive amounts of time on the Internet, playing games, engaging in online chat groups, printing multiple copies of documents, or otherwise creating unnecessary network traffic. Because audio, video, and picture files require significant storage space, files of this or any other sort may not be downloaded unless they are business-related.
• Use for online games and gambling, music, and movie downloads.
7.07 SOCIAL MEDIA POLICY
We understand that social media can be a fun and rewarding way to share your life and opinions with your co-workers and family and friends around the world. However, use of social media also presents certain risks and carries with it certain responsibilities. To assist you in making responsible decisions about your use of social media, we have established these guidelines.
Social media can mean many things. Social media includes all means of communicating or posting information or content of any sort on or via the Internet. Ultimately, you are solely responsible for what you post online. Section 7: County Property and Electronic Services Policy Harris County Personnel Policies & Procedures | Last amended January 14, 2023 26 Before creating online content, consider some of the risks and rewards that are involved. Keep in mind that any of your conduct that adversely affects your job performance, the performance of fellow employees, or otherwise adversely affects vendors, contractors, or others affiliated with the County, may result in disciplinary action up to and including immediate dismissal.
7.072 Know and follow the rules
Make sure your postings are consistent with these policies. Inappropriate postings that include discriminatory remarks, harassment, or threats of violence or similar inappropriate or unlawful conduct will not be tolerated and may subject you to disciplinary action up to and including immediate dismissal.
7.073 Be respectful
Always be fair and courteous to fellow employees and interns, vendors, contractors, or others affiliated with the County. Keep in mind that you are more likely to resolve work-related complaints by speaking directly with your co-workers or by discussing issues with your supervisor than by posting complaints online. Nevertheless, if you decide to post complaints or criticism, avoid using statements, photographs, video, or audio that reasonably could be viewed as malicious, obscene, threatening or intimidating, that disparage co-workers, vendors, contractors, or others affiliated with the County. Examples of such conduct might include offensive posts meant to harm someone’s reputation or posts that could contribute to a hostile work environment on the basis of race, sex, national origin, disability, religion, age, or any other status protected by law or County policy.
7.074 Be honest and accurate
Be honest and accurate when posting information or news about the County. If you make a mistake, correct it quickly. Be open about any previous posts you have altered. Remember that the Internet archives almost everything; therefore, even deleted postings can be searched. Never post any information or rumors that you know to be false about the County, your co-workers, vendors, contractors, or anyone affiliated with the County.
7.075 Maintain confidentiality and clearly identify opinions as your own Maintain the confidentiality of information the County holds that is private or confidential. Do not post internal reports, policies, procedures, or other internal business-related confidential communications. Express only your personal opinions. Never represent yourself as a spokesperson for the County without authorization. If you write about the County, be clear and open about the fact that you are an employee and make it clear that your views do not represent those of the County. It is best to include a disclaimer, such as, “The postings on this site are my own and do not necessarily reflect the views of Harris County.”
7.076 Using social media at work
Refrain from using social media while on working time or on equipment we provide, unless it is work-related and authorized by your manager. Do not use your County email address to register on social networks, blogs, or other online tools for personal use.
7.077 Beware of what you post online
No matter what social media platform you use, consider the type of information you choose to share with others. Here are the common cyber risks you may face when using social media:
• Sharing sensitive information. Sensitive information includes anything that can help a person steal your identity or find you, such as your full name, Social Security number, address, birthdate, phone number, or where you were born.
• Posting questionable content. Questionable content can include pictures, videos, or opinions that make you seem unprofessional or mean and can damage your reputation or the reputation of the County.
• Tracking your location. Many social media platforms allow you to check in and broadcast your location, or automatically adds your location to photos and posts. You could be telling a stalker exactly where to find you or telling a thief that you are not home.
7.08 RETALIATION IS PROHIBITED
We will not take negative action against an employee for reporting a possible violation of this policy or for cooperating in an investigation. Any employee who retaliates against another employee for reporting a possible violation of this policy or for cooperating in an investigation will be subject to disciplinary action up to and including immediate dismissal.