The department is the latest in the state to make this move in response to a California DOJ mandate requiring agencies to protect personal information