PowerPoint Presentation To Keep or Not to Keep The 保留或不保留PowerPoint演示文稿.pptVIP

UVM’s SSN Policy (under review) The University must collect social security numbers of students and employees to fulfill its responsibilities under federal and state law. The University must comply with federal and state laws that govern confidentiality of ssn’s and the destruction of records containing those numbers The policy includes Act 162 prohibitions on the uses of SSN’s, including: Intentionally communicating or making a SSN available to the public Intentionally printing a SSN on any card required for access to services Requiring an individual to transmit a SSN over the internet unless the internet connection is secure Printing a SSN on any materials that are mailed to an individual unless required by law Selling, leasing, lending, trading or otherwise disclosing an individual’s SSN to a third party without consent. Security Breach Notification Requirements Notification required of a security breach of personal data Personal Data - includes a persons first name or initial, last name in combination with SSN, Drivers license number, account number, credit card number, account password or PIN number. UVM’s security breach website: (/ets/security/?Page=breach.html) Litigation Holds When NOT to destroy: Pending or anticipated litigation External investigation Internal audit or investigation Pending request to see a record Public Records Request Records and Documents Request Policy (/~uvmppg/ppg/general_html/record_request.pdf) FERPA/HIPAA FERPA Rights Disclosure Policy /~uvmppg/ppg/student/ferpa.pdf Addresses students rights to access to their educational records Students have legal expectation that their education records kept confidential, however, does not prevent communicating student information to UVM faculty and staff with legitimate need to know basis. HIPAA UVM hybrid entity, only those covered components are subject to HIPAA privacy requirements /~complian/compliance/?Page=HIPAA_UVM.html Points to Remember Respect and secure Personal Information Re