Sensitive Data Policy

Sensitive Data (as defined by IU) includes social security numbers, credit card numbers, tax information, and other state and federally protected data.

In accordance with US laws and IU Policy, the Computer Science Department sets forth the following policy regarding the storage of sensitive data on departmental computing systems.

Student education records (such as grades) are protected by the Family Educational Rights and Privacy Act (FERPA) and must be stored in a manner that prevents illegal disclosure.
The storage of your own personal sensitive data on any department computer or system accessible via the CS network is permitted only if the data is encrypted. See the Encryption FAQ for information about how to encrypt data.
The storage of any and all other sensitive data is prohibited without the approval of the facilities director and department chair.

The CS department reserves the right to do automated scans of data on the department systems to try and locate files containing sensitive data. When files are identified as potentially containing sensitive data, the filename will be sent to the file owner. The owner of the file will be required to either 1) remove the file, 2) remove the sensitive data from the file, 3) encrypt the file if it contains only the file owner's personal sensitive data, or 4) certify that the file does not actually contain any sensitive data.

Home || Facilities: FAQ | System Notices | Help | Hardware | Software | Network | Policies | CSG Staff | Lindley Hall

Page Owner: Webmaster
Last Modified: Nov 27, 2007 3:26pm

IU Computer Science Department
Email: info@IU CS Department