(a) By September 1, 2009, each government agency shall designate an agency employee to have policy and oversight responsibilities for the protection of personal information.
(b) The designated agency employee shall:
(1) Ensure and coordinate agency compliance with this chapter, chapter 487N, and chapter 487R;
(2) Assist individuals who have identity theft and other privacy-related concerns;
(3) Provide education and information to agency staff on privacy and security issues;
(4) Coordinate with state, county, and federal law enforcement agencies on identity theft investigations; and
(5) Recommend policies and practices to protect individual privacy rights relating to the individual's personal information.