Ohio Rev. Code Ann. § 149.433 – Exempting security and infrastructure records

(A) As used in this section: "Act of terrorism" has the same meaning as in section 2909.21 of the Revised Code. "Express statement" means a written statement substantially similar to the following: "This information is voluntarily submitted to a public office in expectation of protection from disclosure as provided by section 149.433 of the Revised Code." "Infrastructure record" means any record that discloses the configuration of critical systems including, but not limited to, communication, computer, electrical, mechanical, ventilation, water, and plumbing systems, security codes, or the infrastructure or structural configuration of a building. "Infrastructure record" includes a risk assessment of infrastructure performed by a state or local law enforcement agency at the request of a property owner or manager. "Infrastructure record" does not mean a simple floor plan that discloses only the spatial relationship of components of the building. "Security record" means any of the following:
1. (1) Any record that contains information directly used for protecting or maintaining the security of a public office against attack, interference, or sabotage;
2. (2) Any record assembled, prepared, or maintained by a public office or public body to prevent, mitigate, or respond to acts of terrorism, including any of the following:
  1. (a) Those portions of records containing specific and unique vulnerability assessments or specific and unique response plans either of which is intended to prevent or mitigate acts of terrorism, and communication codes or deployment plans of law enforcement or emergency response personnel;
  2. (b) Specific intelligence information and specific investigative records shared by federal and international law enforcement agencies with state and local law enforcement and public safety agencies;
  3. (c) National security records classified under federal executive order and not subject to public disclosure under federal law that are shared by federal agencies, and other records related to national security briefings to assist state and local government with domestic preparedness for acts of terrorism.
3. (3) An emergency management plan adopted pursuant to section 3313.536 of the Revised Code.
(B)
1. (1) A record kept by a public office that is a security record is not a public record under section 149.43 of the Revised Code and is not subject to mandatory release or disclosure under that section.
2. (2) A record kept by a public office that is an infrastructure record of a public office, public school, or a chartered nonpublic school is not a public record under section 149.43 of the Revised Code and is not subject to mandatory release or disclosure under that section.
3. (3) A record kept by a public office that is an infrastructure record of a private entity may be exempted from release or disclosure under division (C) of this section.
(C) A record prepared by, submitted to, or kept by a public office that is an infrastructure record of a private entity, which is submitted to the public office for use by the public office, when accompanied by an express statement, is exempt from release or disclosure under section 149.43 of the Revised Code for a period of twenty-five years after its creation if it is retained by the public office for that length of time.
(D) Notwithstanding any other section of the Revised Code, disclosure by a public office, public employee, chartered nonpublic school, or chartered nonpublic school employee of a security record or infrastructure record that is necessary for construction, renovation, or remodeling work on any public building or project or chartered nonpublic school does not constitute public disclosure for purposes of waiving division (B) of this section and does not result in that record becoming a public record for purposes of section 149.43 of the Revised Code.