Protecting Highly Sensitive Data

Protecting Highly Sensitive Data:

The following Personally Identifiable Information is considered Highly Sensitive Data and every caution should be used in protecting this information from authorized access, exposure or distribution:

  • Social Security Number
  • Drivers License Number
  • Passport Number
  • Personal Banking, Debit, or Credit Card Account Information
  • Full Name (First Name, Middle Initial and Last Name) when used in conjunction with Full Date of Birth (MM/DD/YYYY)

This data should only be collected or maintained when there is an approved and authorized business justification.  Unless absolutely required for a particular business function, these personally identifiable data elements should never be collected, stored, shared or distributed.

Please refer to the UMW policy regarding the Electronic Storage of Highly Sensitive Data.  By UMW policy, there are specific restrictions regarding how and when such data can be electronically stored.

For additional guidance regarding the appropriate use and distribution of highly sensitive data or other protected data, please contact the appropriate Data Stewards, defined in Appendix A of the Administrative Data Access Policy.