The Office of the Comptroller of Puerto Rico issued a qualified opinion on the operations of the Demographic Registry System (RegDem system) of the General Demographic Registry of Puerto Rico. A qualified opinion is issued when noncompliance, individually or in the aggregate, is significant but not pervasive.
The Report reveals that the Demographic Registry does not have the confidentiality agreements for 61% of external users. The Confidentiality Agreement form is used to create accounts for internal and external users, to grant the requested privileges, while establishing the obligation of confidentiality of the information of vital events. For the audited period, the RegDem system had 279 internal users and 501 external users.
The one-finding audit also notes that three agencies and a public corporation accessed the records up to more than two years after the collaboration agreements signed with the Demographic Registry had expired. This situation, contrary to the security standards in force and to the guidelines established in the Federal Information System Controls Audit Manual (FISCAM), deprives the Demographic Registry of tools to protect confidentiality, and exposes the entity to litigation in the event that information is disclosed or used for unauthorized purposes.
The Report covers the period from October 3, 2016 to November 17, 2017.
See Audit Report TI-20-04.
To see other published reports, visit our Audit Reports section.
Some documents on this page are saved in PDF format.
To view these documents, you must have the following free program installed.
