1. The office shall adopt rules and regulations in conformity with the provisions of this article, and specify a model internet privacy policy for state agencies that maintain state agency websites. Such model privacy policy shall include, but not be limited to, the following elements:

1. (a) a statement of any information, including personal information, the state agency website will collect with respect to the user and the use of the information;
2. (b) the circumstances under which information, including personal information, collected may be disclosed;
3. (c) whether any information collected will be retained by the state agency, and, if so, the period of time that such information will be retained;
4. (d) the procedures by which a user may gain access to the collected information pertaining to that user;
5. (e) the means by which information is collected and whether such collection occurs actively or passively;
6. (f) whether the collection of information is voluntary or required, and the consequences, if any, of a refusal to provide the required information; and
7. (g) the steps being taken by the state agency to protect the confidentiality and integrity of the information.