Information Systems FAQ - What is sensitive data and how am I required to protect it?

If an individual's name is paired with one or more of the following, encryption is either required or highly recommended.

Encryption Required by State and Federal Law	Encryption Highly Recommended
Social Security Number	Birthdate
Driver's License Number (Operator License Number)	Course Grade or other evaluated items from coursework
Credit Card Number (any type)	Any health-related records
Debit Card Number and PIN	Other relative financial information
Bank Account

Encryption requirements apply to sensitive data stored on a computer's hard drive, removable hard drive, thumb drive (e.g. flash drive, USB key, jump drive, etc.), CD, DVD, or other data storage device.
In addition, personal data such as addresses, telephone numbers, and e-mail addresses should be handled with respect to further protect an individual's identity.
Many of our campus members are already doing their part to protect sensitive data, including using TrueCrypt encryption software when storing sensitive data. If you handle sensitive data and aren't already using encryption software, please contact us at the Help Desk (help@uindy.edu or 788-6145) to learn more about safeguarding it.