Lead Opinion
OPINION BY
The Office of the Lieutenant Governor (OLG) petitions for review of a Final Determination of the Office of Open Records (OOR) directing the OLG to disclose to Daniel Mohn (Requester) the home address of an OLG employee and all agency-issued e-mail addresses for Lieutenant Governor James Cawley. For the reasons that follow, we affirm in part and reverse in part.
On April 25, 2012, Requester submitted a request to the OLG under the Right-to-Know Law (RTKL)
The OLG responded explaining that it does not issue e-mail addresses or telephone numbers, so it would treat the request as one for government-issued email addresses and telephone numbers that were issued to members of the OLG. The OLG provided the government-issued email addresses and telephone numbers for the requested individuals that were held out to the public as e-mail addresses or telephone numbers at which the public officials could be contacted but, citing the personal identification information
Requester appealed to the OOR, seeking the information to which the OLG had denied access. In support of its position to deny access based on the personal security exemption, the OLG submitted the affidavit of Eric Avakian (Avakian), its Chief Information Security Officer, attesting that the disclosure of home addresses increases the risk of social engineering attacks and identity theft, and copies of the OLG’s responses to other prior RTKL requests. It also maintained that access should be denied for the other reasons given in the denial letter.
The OOR granted Requester access to both the OLG employee’s home address and all agency-issued e-mail addresses for the Lieutenant Governor. With regard to home addresses, it noted that such information is not protected under the personal identification information exception or under the right to privacy principles embodied in the Pennsylvania Constitution because there is no expectation of privacy in home addresses. Moreover, in finding that the personal security exemption did not apply, it stated that nothing in OLG’s Chief Security Officer Avakian’s affidavit led it to conclude that the disclosure of home addresses is reasonably likely to result in identity theft and fraud, and went on to note that more than mere conjecture is needed to meet the “heightened standard” of establishing that the personal security exemption applies.
E-mails created by public officials, acting in their official capacity, for the purpose of furthering agency business are public records.... Similarly, e-mail addresses created for public officials to transact agency business cannot be considered anything other than public records. The OOR concludes that the word “personal” in “personal email addresses” is not intended to apply to email addresses assigned to specific public officials and public employees. Rather, the word “personal” is intended to apply to e-mail addresses not used for agency business. Had the General Assembly intended employee e-mail address[es] to be exempt from public disclosure, it would have specifically stated “employee e-mail addresses” instead of “personal email addresses.”
(OOR’s June 13, 2012 Final Determination at 5) (citation omitted). The OLG then filed this appeal.
I.
A.
On appeal, the OLG, conceding that the personal identification information exception of the RTKL does not provide blanket protection for home addresses,
Pennsylvania enacted its first Right-to-Know Law in 1957 (old RTKL).
The Right to Know Act, however, contains no clause or provision to protect against the invasion of an individual’s privacy as does the federal Freedom of Information Act, 5 U.S.C. § 552, and for us to equate a concept of privacy with the concept of ‘personal security’ would usurp the legislative prerogative of the General Assembly.... The concept of .personal security, we believe, involves protection from personal harm rather than protection from an invasion of privacy. To hold otherwise would render the Act nugatory. Moreover, we have held that for records to fall within the personal security exception they must be intrinsically harmful and not merely capable of being used for harmful purposes.
Id. at 740. In Mergenthaler v. Commonwealth State Employes’ Retirement Board,
In 1983, in a non-RTKL case dealing with the Public Officials Ethics Act,
A decade later, for the first time, this Court extended the Denoncourt analysis to home addresses requested pursuant to the old RTKL. In Times Publishing Company, Inc. v. Michel,
Our Supreme Court took up the issue in Sapp Roofing Company, Inc. v. Sheet Metal Workers’ International Association, Local Union No. 12,
The first case that addressed the privacy cases in the age of the Internet was in Commonwealth v. Duncan,
[W]e agree with the Commonwealth that any subjective expectation of privacy that appellant may have had in the name and address information is not an expectation which society would be willing to recognize as objectively reasonable in light of the realities of our modern age. Whether registering to vote, applying for a driver’s license, applying for a job, opening a bank account, paying taxes, etc., it is all but impossible to live in our current society without repeated disclosures of one’s name and address, both privately and publicly. There is nothing nefarious in such disclosures. An individual’s name and address, by themselves, reveal nothing about one’s personal private affairs. Names and addresses are generally available in telephone directories, property rolls, voter rolls, and other publications open to public inspection. In addition, it has become increasingly common for both the government and private companies to share or sell name or address information to unaffiliated third parties....
In this day and age where people routinely disclose their names and addresses to all manner of public and private entities, this information often appears in government records, telephone directories and numerous other documents that are readily accessible to the public, and where customer lists are regularly sold to marketing firms and other busi*130 nesses, an individual cannot reasonably expect that his identity and home address will remain secret — especially where, as here, he takes no specific action to have his information treated differently and more privately.
We are further convinced of the correctness of our conclusion that no privacy expectation reposes in this information by the fact that the majority of courts to consider the question have agreed that a person’s name and address is not information about which a person can have a reasonable expectation of privacy.
In a case decided under the old RTKL where the personal security exemption and the right to privacy was somewhat conflated, we held in Hartman v. Department of Conservation and Natural Resources,
B.
Alternatively, the OLG argues that the evidence it submitted to the OOR was sufficient to prove that employees’ home address information falls under the RTKL’s personal security exception. In order to withhold information from public disclosure pursuant to the personal security exception of the RTKL, an agency “must meet its burden of proving by a preponderance of the evidence that disclosure of such “would be reasonably likely to result in a substantial and demonstrable risk of physical harm to the personal security of an individual.’ ” Schaefer,
In support of its assertion that the disclosure of the home addresses of government employees would be reasonably likely to result in a risk of harm to the personal security of those individuals, the OLG presented the affidavit of its Chief Security Officer, Avakian. The affidavit states that home addresses are one of the many elements often used for the express purpose of distinguishing individual identity, and that a home address “dear
Divulging home address information significantly increases the risk of social engineering attacks on the individuals whose information was divulged. For instance, someone with this specific information can conduct reconnaissance to gather additional details about an individual and target them directly by calling or emailing the individual, and pretending to be a representative for the individual’s company. The attacker could then verify the individual’s name and home address, which will, in turn, help to gain the targeted trust of the individual. Once a trust relationship has been established between the attacker and victim, the attacker is already down the path of gathering more information, including but not limited to, gaining financial, personal, or other sensitive information that the attacker would' not have otherwise known. Identity theft is the likely result. According to Justice Department figures, in about 8.6 million households at least one person 12 or older experienced some kind of identity theft in 2010.
(R.R. at 27a-28a).
After reviewing Avakian’s affidavit, we agree with the OOR that “nothing in his affidavit leads [to the conclusion] that home addresses should be added to the ‘Holy Trinity of personal information, ie., person’s name, social security number and date of birth, that are reasonably likely to result in identity theft and fraud.” (OOR’s June 13, 2012 Final Determination at 6). First, as the courts of this Commonwealth have held and as we have stated above, any expectation of privacy that an individual may have in his or her home address information is not objectively reasonable in modern society. See Duncan; Marin. Second, the affidavit contains no actual evidence that the disclosure of home addresses is reasonably likely to result in identity theft, and fails to demonstrate even a correlation between the disclosure of home addresses and an increased likelihood of identity theft. To the contrary, the affidavit indicates that identity theft only occurs after the identity thief has taken additional steps to contact the victim, gain the victim’s trust and convince the victim into disclosing truly confidential information. Moreover, a number of Ava-kian’s conclusions are not supported by the facts stated in the affidavit. For instance, he concludes that a home address “clearly constitutes” PII, yet the definitions of PII he cites to specifically do not include home addresses as PII.
Based on the foregoing, the OLG did not meet its burden of proving that disclosure of an individual’s home address would be reasonably likely to result in a substantial and demonstrable risk of harm to the personal security of that individual. Accordingly, the OOR correctly determined that an OLG employee’s home address is subject to disclosure under the RTKL.
The OLG next argues that the Lieutenant Governor’s secondary, government-issued e-mail addresses are exempt from disclosure under the personal identification information exception to the RTKL. That exception exempts from disclosure, inter alia, “a record containing all or part of a person’s ... personal e-mail addresses.” Section 708(b)(6)(i)(A) of the RTKL, 65 P.S. §■ 67.708(b)(6)(i)(A). The OLG contends that “personal identification information” refers to information that is unique to a particular individual, and a “personal email address” is one intended for the use of a specific person. It argues that nothing in the RTKL restricts the exception to non-government issued e-mail addresses or suggests that the word “personal” only applies to e-mail addresses not used for agency business.
Both the OOR and Requester focus on the fact that the e-mail address in question may be used to conduct official government business. For instance, Requester argues in his brief that “[t]here is nothing personal ... about a government-issued email account that is used to conduct agency business at the public’s expense.” (Petitioner’s Brief at 81). Similarly, the OOR concluded that because e-mails created by public officials acting in their official capacity for the purpose of furthering agency business are public records, it follows that e-mail addresses created for public officials to transact agency business must also be considered public records.
What is considered “personal identification information” is not defined in the RTKL. However, this Court has defined the term as:
[I]nformation that is unique to a particular individual or which may be used to identify or isolate an individual from the general population. It is information which is specific to the individual, not shared in common with others; that which makes the individual distinguishable from another.
Schaefer,
While the secondary e-mail address in question is used to conduct agency business, it still falls within Section 708(b)(6)(i)(A) of the RTKL’s exemption of “a record containing all or part of a person’s ... personal e-mail address” because, even though it is being used to transact public business, nonetheless, it is still personal to that person. We note that other than the identification of the e-mail address in question, a requester would clearly have the ability to request e-mails
Accordingly, the OOR’s Final Determination is affirmed to the extent that it provided access to the home address of an OLG employee, but reversed as to the portion providing for the disclosure of all agency-issued e-mail addresses for Lieutenant Governor Cawley.
ORDER
AND NOW, this 24-th day of April, 2013, the Final Determination of the Office of Open Records, dated June 13, 2012, at No. AP2012-0787, is affirmed in part and reversed in part. The Final Determination is affirmed to the extent that it provided access to the home address of an employee of the Office of the Lieutenant Governor, but reversed as to the portion providing for the disclosure of all agency-issued email addresses for Lieutenant Governor Cawley.
Notes
. Act of February 14, 2008, P.L. 6, 65 P.S. §§ 67.101-67.3104. The RTKL was designed to promote access to official government information in order to prohibit secrets, scrutinize the actions of public officials and make public officials accountable for their actions. Bowling v. Office of Open Records,
.Section 708(b)(6)(i) of the RTKL, 65 P.S. § 67.708(b)(6)(i), exempts the following from disclosure:
(A). A record containing all or part of a person’s Social Security number, driver's license number, personal financial information, home, cellular or personal telephone numbers, personal e-mail addresses, employee number or other confidential personal identification number.
(B) A spouse's name, marital status or beneficiary or dependent information.
(C) The home address of a law enforcement officer or judge.
. Section 708(b)(l)(ii) of the RTKL, 65 P.S. § 67.708(b)(1)(b), exempts information from public disclosure that, if released, "would be reasonably likely to result in a substantial and demonstrable risk of physical harm to or the personal security of an individual.”
. Specifically, the OLG's responses to those prior RTKL requests included the home address of the Lieutenant Governor and the personal e-mail addresses of the two Board of Pardons’ employees.
. "The scope of review for a question of law under the [RTKL] is plenary.” Stein v. Plymouth Township,
. In Schaefer, this Court held:
[BJecause there is no mention of birth dates and home addresses of "all other” public employees in the Personal Identification Exception, these items are not entitled to the unconditional protection afforded the home addresses and birth dates of certain vulnerable or at-risk individuals such as law enforcement officers, judges and minor children. They are, therefore, not categorically exempt under the Personal Identification Exception.
.Act of June 21, 1957, P.L. 390, as amended, 65 P.S. §§ 66.1-66.9, repealed by Act of February 14, 2008, P.L. 6, 65 P.S. §§ 67.101-67.3104.
. Act of October 4, 1978, P.L. 883, No. 170, 65 P.S. §§ 401-413, repealed by 65 Pa.C.S. §§ 1101-1113.
. Act of August 15, 1961, P.L. 987, as amended, 43 P.S.§§ 165-1-165-17.
. We note that Marin was a single-judge opinion and that such an opinion, "even if reported, shall be cited only for its persuasive value, not as binding precedent.” Ario v. Reliance Ins. Co.,
. Judge Cohn Jubelirer’s concurring opinion posits that our Supreme Court's holding in Pennsylvania State Education Association ex rel. Wilson v. Commonwealth,-Pa.-,
. For example, the affidavit cites to a 2007 Office of Management and Budget memorandum from the Executive Office of the President, which defines PII as “[information which can be used to distinguish or trace an individual’s identity, such as their name, social security number, biometric records, etc. alone, or when combined with other personal or identifying information which is linked or linkable to a specific individual, such as date and place of birth, mother’s maiden name, etc.” (R.R. at 25a).
. That provision exempts from disclosure: “Notes and working papers prepared by or for a public official or agency employee used solely for that official’s or employee’s own personal use, including telephone message slips, routing slips and other materials that do not have an official puipose." (Emphasis added.)
. Requester also requests that this Court find that the OLG denied his request in bad faith and impose sanctions pursuant to Sections 1304 and 1305 of the RTKL, 65 P.S. §§ 67.1304-1305. Requester argues that the OLG "has admitted that it possesses and uses government issued email accounts that it refuses to disclose claiming they are 'personal' to the Lieutenant Governor.” (Petitioner’s Brief at 35). Requester claims that the OLG lacks a reasonable basis in the law to assert such an exemption. However, because we agree with the OLG on this point, Requester’s sanctions argument is without merit.
Concurrence Opinion
CONCURRING OPINION BY
I agree that the Right to Know Law
I admire the majority’s valiant effort to provide a “short history of the right to privacy vis a vis public records” particularly in an area recognized as so “fraught with challenge.” Office of the Lieutenant Governor v. Mohn,
First, our Court should not reach a constitutional question unless it is specifically raised by the parties.
Second, a court will reach the constitutional issue only if the case before it cannot be resolved on non-constitutional grounds.
Finally, where a right is protected by the Pennsylvania Constitution, a statute cannot reduce or eliminate that right.
The right to privacy in the Pennsylvania Constitution can be found in Article I, Sections 1 and 8.
Given this background, I do not read our Supreme Court’s decision in Commonwealth v. Duncan,
While it is true that in our modern, technological society, information about individuals may be more easily found, particularly on the internet as evidenced by the author of the majority opinion performing his own internet search,
This due process deficiency in the RTKL, created by the lack of statutorily required notice to and the right to fully participate in the proceedings by the individual whose information will be disclosed, was recently highlighted by our Supreme Court in a case involving the disclosure of the names and home addresses of public school teachers. Pennsylvania State Education Association ex rel. Wilson v. Commonwealth, — Pa. -,
As a threshold matter, Appellants have amply established that — although school employees have (at the very least) a colorable interest in the grant or deni*138 al of RTKL requests for their personal address information — the RTKL does not make them parties to the request or the ensuing appeal process. Indeed, affected school employees are not so much as afforded required notice of requests and/or proceedings before the OOR. While the OOR portrays itself as a quasi-judicial tribunal relative to Appellants’ interests, it offers an exceptionally weak rejoinder to Appellants’ notice-related concerns. In this regard, the OOR merely observes that local agencies such as school districts may adopt rules to provide adequate notice. See Brief for the OOR at 9. Indeed, the OOR’s position that affected school employees receive adequate process depends on a series of such mere possibilities: each of the some 500 school districts statewide may or may not adopt an individualized notice policy; a school employee whose address is requested may or may not receive notice of the request; a school district may or may not disclose the information to requestors; if a district does not'disclose, and upon a requestor’s appeal, the OOR may or may not permit the affected schoolteacher to participate in the proceedings; and thé school employee may or may not be aware of any further appeal proceedings in the judiciary.
Id. at-,
I also would not read our Supreme Court’s recent per cunam affirmance of this Court’s single judge opinion in Marin v. Secretary of the Commonwealth,
I respectfully believe that it is too soon to ring the death knell of the right to privacy protected by the Pennsylvania Constitution and to sweepingly declare that under no circumstances could any individual prove such a right in his or her home address. While I agree in this modern age that such circumstances might be rare, I cannot say with certainty that they will never exist. Moreover, I am troubled at rendering this sweeping declaration when the individual whose address is being disclosed is not afforded the right, under the RTKL, to receive notice and an opportunity to prove the existence of the constitutional interest before we make our decision.
In this case, the affidavit was not specific enough to meet the personal security exception under the RTKL. In addition, there was no evidence of the individual’s subjective expectation of privacy in her address, or of the reasonableness of the expectation, in order to meet the Constitutional two-part test. Although the individual whose address was requested, and who might have been able to make the requisite showing to support either the application of the personal security exception or the violation of her right to privacy, has not been statutorily afforded the right to be heard prior to disclosure of the information, there was no argument that the statute is constitutionally infirm on that basis. I, therefore, am constrained to concur in the result only of the majority opinion.
.Act of February 14, 2008, P.L. 6, 65 P.S. §§ 67.101-67.3104.
. I note that the cases balancing a person’s constitutional right to privacy with the personal security exception under the old RTKL do not clearly separate the Pennsylvania Constitution from the statutory law.
. In general, matters not raised in the court below cannot be considered on appeal even if they involve constitutional questions. Altman v. Ryan,
. "It is well settled that when a case raises both constitutional and non-constitutional issues, a court should not reach the constitutional issue if the case can properly be decided on non-constitutional grounds.” Ballou v. State Ethics Commission,
. A statute will be found to be unconstitutional if it is proven that the law clearly, palpably and plainly violates a fundamental constitutional right, such as the right to privacy. Nixon v. Commonwealth,
. Article I, Section 1 of the Pennsylvania Constitution provides:
All men are born equally free and independent, and have certain inherent and indefeasible rights, among which are those of enjoying and defending life and liberty, of acquiring, possessing and protecting property and reputation, and of pursuing their own happiness.
Pa. Const. Art. I, § 1. Article I, Section 8 provides:
The people shall be secure in their persons, houses, papers and possessions from unreasonable searches and seizures, and no warrant to search any place or to seize any person or things shall issue without describing them as nearly as may be, nor without probable cause, supported by oath or affirmation subscribed to by the affiant.
Pa. Const. Art. I, § 8.
. Ken Gormley, Jeffrey Bauman, Joel Fish-man, Leslie Kozler, The Pennsylvania Constitution, A Treatise on Rights and Liberties 87 (2004).
. See, e.g., Commonwealth v. Edmunds,
. Seth F. Kreimer, The Right to Privacy in the Pennsylvania Constitution, reprinted in Gorm-ley, The Pennsylvania Constitution 786.
. Denoncourt v. State Ethics Commission,
. See also Sapp Roofing v. Sheet Metal Workers' International Association, Local Union No. 12,
. We note that Duncan was a criminal case; however, the two-part test for establishing whether there was an expectation of privacy was enunciated by the United States Supreme Court in the context of federal constitutional interpretation, and has been applied to both criminal and civil cases.
"[T]he Fourth Amendment protects people, not places." The question, however, is what protection it affords to those people. Generally, as here, the answer to that question requires reference to a ‘place.’ My understanding of the rule that has emerged from prior decisions is that there is a twofold requirement, first that a person have exhibited an actual (subjective) expectation of privacy and, second, that the expectation be one that society is prepared to recognize as ‘reasonable.’ Thus[,] a man's home is, for most purposes, a place where he expects privacy, but objects, activities, or statements that he exposes to the ‘plain view’ of outsiders are not ‘protected’ because no intention to keep them to himself has been exhibited.
Katz v. United States,
. See Office of the Lieutenant Governor,
. The majority opinion correctly notes that this opinion is not precedential. Office of the Lieutenant Governor,
. Act of June 3, 1937, P.L. 1333, as amended, 25 P.S. § 2870.
. As recently noted by our Supreme Court, when it "issues a per curiam affirmance, '[u]nless we indicate that the opinion of the lower tribunal is affirmed per curiam, our order is not to be interpreted as adopting the rationale employed by the lower tribunal in reaching its final disposition.' ” In re Stevenson,
Concurrence in Part
CONCURRING and DISSENTING OPINION BY
Respectfully, I dissent from one of the majority’s holdings. I would affirm the decision of the Office of Open Records that an e-mail address created by the government for the purpose of transacting governmental business is not a “personal email address” within the meaning of Section 708(b)(6)(i)(A) of the Right-to-Know Law.
My dissent in this case may appear inconsistent with Office of the Governor v. Raffle,
Otherwise, I join the majority opinion.
Judge SIMPSON joins in this Concurring and Dissenting Opinion.
. Act of February 14, 2008, P.L. 6, 65 P.S. §§ 67.101-67.3104.
Concurrence in Part
CONCURRING AND DISSENTING OPINION BY
I agree with the Majority that the request of Daniel Mohn (Requester) seeking government e-mail addresses from the Lieutenant Governor is exempt from disclosure pursuant to section 708(b)(6)(i)(A) of the Right-to-Know-Law (RTKL), Act of February 14, 2008, P.L. 6, 65 P.S. § 67.708(b)(6)(i)(A), even though Requester would clearly have the ability to request e-mails from the same accounts under the RTKL, subject to any statutory exemptions.
I diverge from the Majority’s holding that there is no right to privacy implicated when the home address of an employee of the Lieutenant Governor’s office is disclosed to the public. In Pennsylvania State Education Association ex rel. Wilson v. Office of Open Records,
As this Court has pointed out, the former Right to Know Act and its successor, the RTKL, both contain the term “personal security” and also an exception dubbed the “personal security exemption.” However, the language enclosing the term “personal security” in the former Right to Know Act was different from that of the RTKL. The personal security exemption of the former Right to Know Act excluded a record that “would operate to the prejudice or impairment of a person’s reputation or personal security.” Section 1(2) of the prior Right to Know Act, formerly 65 P.S. § 66.1(2). On the other hand, the RTKL currently exempts a record that “would be reasonably likely to result in a substantial and demonstrable risk of physical harm to or the personal security of an individual.” Section 708(b)(l)(ii) of the RTKL, 65 P.S. § 67.708(b)(1)(ii).
Following this Court’s decision in PSEA, we had the opportunity in Delaware County v. Schaefer,
Schaefer establishes that the right of privacy is subsumed in the term “personal security” under the current RTKL. Schae-fer further provides that case law interpreting the former Right to Know Act has attached significant legal meaning to the phrase “personal security” and that this meaning is binding or controlling authority when construing the RTKL.
On a variety of occasions, this Court has examined the former Right to Know Act and prohibited the disclosure of home addresses on the ground that the privacy right and personal security of the individual trumped any need for disclosure. See Goppelt v. City of Philadelphia Department of Revenue,
Under Bodack the term “personal security” in the former Right to Know Act encompassed, and was indeed inseparable from, the privacy right that an individual has in his or her home address. Pursuant to Schaefer, Bodack’s interpretation of “personal security” is controlling and is transposed to the RTKL; consequently, the phrase “personal security” in the RTKL also includes a right of privacy that protects against the unwarranted disclosure of a home address. For this reason, I am unable to share the Majority’s opinion that the current “personal security” exception of the RTKL does not contain a cognizable privacy right, particularly one that is
In reaching my position, I recognize that in contrast to the former Right to Know Act, the current formulation of the RTKL requires that the privacy right in an individual’s address must be one that is “reasonably likely to result in a substantial and demonstrable risk.” 65 P.S. § 67.708(b)(l)(ii). While this appears to create a new test upon which to assess the value or nature of a privacy right, the Supreme Court in Bodack observed that:
there are certain types of information whose disclosure, by their very nature, would operate to the prejudice or impairment of a person’s privacy, reputation or personal security, and thus intrinsically possess a palpable weight that can be balanced by a court against those competing factors that favor disclosure. Private telephone numbers are one such type.
Bodack,
Consistent with Bodack, I believe that the basic privacy right in a home address carries sufficient weight in the calculus that any infringement thereof could constitute a “substantial and demonstrable risk” to the personal security of an individual.
However, and unfortunately, the record in this case does not demonstrate that the individual whose information is to be disclosed has had the opportunity to intervene or has otherwise been given a chance to prove a “substantial and demonstrable risk.” I believe that the Court has an independent duty to ascertain the effect of its orders on the rights of individuals not privy to an action and to inquire as to whether the interests of these absent persons are being adequately represented by the parties. In any event, because this is a RTKL appeal, this Court is entitled to the broadest scope of review and has the authority to allow an interested party/individual to supplement the evidentiary record when necessary. Bowling v. Office of Open Records,
. Additionally, although the issue was not raised by the parties, I seriously question whether an e-mail address, standing alone, is a "record” under section 102 of the RTKL, 65 P.S. § 67.102. In my view, an e-mail address does not “document a transaction or activity of an agency” — rather, it is a collection of letters, symbols, and/or numbers that are ascribed to a person for communicative purposes.
. Act of June 21, 1957, P.L. 390, formerly 65 P.S. §§ 66.1-66.9, repealed by Act of February 14, 2008, P.L. 6, 65 P.S. §§ 67.101-67.3104.
. Even if the personal security exemption did not include a statutorily-based right to privacy, I agree with my esteemed colleague, Judge Cohn Jubelirer, that such a right is implied in the RTKL because it is guaranteed by the Pennsylvania Constitution.
