|
|
Sensitive Data Policy
Sensitive Data (as defined by IU) includes
social security numbers, credit card numbers, tax information, and other state and federally
protected data.
In accordance with US laws and
IU Policy,
the Computer Science Department sets forth
the following policy regarding the storage of sensitive data on departmental computing systems.
- Student education records (such as grades) are protected by the
Family Educational Rights and Privacy Act (FERPA)
and must be stored in a manner that prevents illegal disclosure.
- The storage of your own personal sensitive data on any department computer or system
accessible via the CS network is permitted only if the data is encrypted.
See the Encryption FAQ
for information about how to encrypt data.
- The storage of any and all other sensitive data is prohibited without the
approval of the facilities director and department chair.
The CS department reserves the right to do automated scans of data on the
department systems to try and locate files containing sensitive data. When files
are identified as potentially containing sensitive data, the filename will be sent to the
file owner. The owner of the file will be required to either
1) remove the file,
2) remove the sensitive data from the file,
3) encrypt the file if it contains only the file owner's personal sensitive data, or
4) certify that the file does not actually contain any sensitive data.
|
