Ride Alliance Data Collection Policy

Collection of Protected Information. When you choose to participate in the Ride Alliance program, you may be asked to provide certain protected personal information (Protected Information) about yourself, including:

• Personally identifiable information (PII) as defined in C.R.S. § 24-73-101 including social security numbers, driver’s license numbers, personal identification numbers, passwords, passcodes, and credit/debit card information.
• Personal information as defined in C.R.S. § 24-73-103.
• Protected health information (PHI) as defined by the Health Insurance Portability and Accountability Act (HIPAA).

Use of Protected Information. Your Protected Information will be used solely by DRCOG or by its designated partners and its use is limited to those with a "need to know."

Disclosure of Protected Information. DRCOG will not disclose your Protected Information to third parties without your permission except: when required by law; pursuant to judicial process (such as a search warrant or administrative subpoena); or if DRCOG determines there are compelling circumstances regarding an individual’s health or safety and the disclosure is not otherwise prohibited by law.

Protection of Protected Information. DRCOG will collect, access, use, store, process, dispose of, and disclose Protected Information in accordance with applicable law, including C.R.S. § 24-73-101, et seq. and HIPAA. In addition, it is DRCOG’s policy to comply with recognized standards for data privacy and security.

Security of Protected Information. DRCOG will investigate incidents involving loss, theft, damage, misuse, or improper dissemination of Protected Information. If DRCOG detects an intrusion or other unauthorized access to or use of Protected Information, it will act in accordance with C.R.S. § 24-73-103 and/or HIPAA. Online security is a top priority, but there is always a possibility of a breach. DRCOG works to keep every transaction secure, but DRCOG will not be liable to you, in contract, tort or otherwise, for any damages of any kind if a breach does happen.