"Protected information" is an umbrella term for information that is linked to an individual person's identity, such as Social Security numbers, drivers' license data, and credit card or bank account information (sometimes called Personally-Identifiable Information, or PII) and which can be used to facilitate identity theft. Universities in particular have become attractive targets for hackers because of the freedom with which information is exchanged in an educational environment. Humboldt State University, like other institutions, is legally required to be vigilant and proactive in the protection of PII that's been entrusted to us.
The University has issued an executive memorandum, the main points of which are described below, which aims to identify and protect private data entrusted to the University. This executive memorandum mandates that all University employees locate existing protected data in their area and either register and protect it or destroy it.
The Executive Memorandum for Protected Information defines data classification standards for Humboldt State University. It also establishes requirements for the protection of Level 1 Protected data and Level 2 Private data stored on campus computers.
The University is required to inventory protected information stored on campus systems. PII detection tools can be used to quickly locate protected information stored on campus computers.
The Protected Information Detection toolkit contains:
If you find protected data on a system under your control, the following options are available to you:
Remember that HSU protected data may only only be kept on campus systems.
Level 1 or Level 2 data may only be kept on a system if it meets the following conditions: