Data Protection
Service or System\Data Sensitivity | FERPA (Education Records) |
HIPAA (Health Records) |
Personal Data (SSN, etc) |
Human Subjects |
Credit Card & Banking Data |
Other Sensitive Data |
---|---|---|---|---|---|---|
Email & Calendar | ||||||
Hard Drive & Flash Drives* | ||||||
Web Storage (Dropbox, Box, etc)** | ||||||
UWP File Shares and Servers | ||||||
UWP Sharepoint | ||||||
UWP OneDrive (future) | ||||||
Qualtrics Survey Tool | ||||||
Learning Management System (LMS) | ||||||
UW/UWP Web and Video Conferencing | ||||||
Non-UW Web and Video Conferencing | ||||||
Personally Owned Computers *** | ||||||
Document Imaging System | ||||||
Other Third Party System **** |
* Computer hard drives may be used with high level of caution for brief storage of sensitive data, such as when transferring files or when an application requires it
** Some UW institutions have signed contracts with providers such as Box.net. Using those services when contact is initiated by such institutions is allowed.
*** Personally Owned Computers may be allowed to access sensitive data via authorized remote secure tunnel connection
**** Third party systems may not store sensitive data except where the system owns such data (e.g. EMR system manages health/HIPAA protected records)
Even when sensitive data is allowed to be stored caution must be exercised. You may send, store or share the sensitive data type with a particular service if the data owner and your department/unit policies permit you to do so. For additional information, contact the CTS Information Security Officer or the campus FERPA official.
Security Tools
BitLocker
All new campus PCs are issued with the BitLocker tool enabled. This tool protects the computer's drives so that the data on them are nearly impossible to access by thieves should the computer or the drive be stolen. Consider enabling BitLocker on any personal PCs also.
Desktop Lockout
All campus PCs are now set to lock the screen after 10 minutes of no activity. This helps ensure the protection of the data on the computer or on the network.