Access to and Responsible Use of Data Policy governs where and how DePaul data should be managed. For an overview of some examples of data and where they should be stored, see the sample list below. Additional guidance for any data not covered here can be found in the policy.
*Non-DePaul-Managed or unsactioned Cloud Storage Service Providers such as Dropbox, Box, Personal Microsoft OneDrive, Personal Google Drive, Apple iCloud, AWS, Carbonite, etc.
Description |
Data Type** |
DePaul Microsoft OneDrive & U:/W: |
DePaul Google Drive |
Cloud Services* |
|
Passwords, pins, and similar data that permit access to financial accounts or other personal data*** |
Highly Sensitive Data |
No
|
No |
No
|
|
Credit/Debit Card Number *** |
Highly Sensitive Data |
No
|
No |
No
|
|
Other bank or financial account numbers |
Highly Sensitive Data |
Yes |
No
|
No
|
|
Driver’s license numbers and other government identification card numbers |
Highly Sensitive Data |
Yes |
No
|
No
|
|
Social Security Number |
Highly Sensitive Data |
Yes |
No
|
No
|
|
HIPAA covered data |
Highly Sensitive Data |
Yes |
No
|
No
|
|
Student Financial Aid Data |
Sensitive Data |
Yes |
No
|
No
|
|
FERPA covered data |
Internal Restricted Data |
Yes |
Yes
|
No
|
|
Employees pay rates or other confidential payroll data |
Internal Restricted Data |
Yes |
Yes |
No
|
|
Research data that does not contain subject identifiable data |
Internal Restricted Data |
Yes |
Yes |
No
|
|
Class Information |
Internal Non-Restricted Data |
Yes |
Yes
|
No
|
|
Employee names, telephone numbers and email addresses |
Internal Non-Restricted Data |
Yes |
Yes
|
No
|
|
Employee job titles and dates of employment |
Internal Non-Restricted Data |
Yes |
Yes
|
No
|
|
Data posted on university bulletins and data on unrestricted university web sites |
Public |
Yes |
Yes |
Yes |