Combining best practices with industry-leading innovation, ITSĢżcreates an environment that balances the Ļć½¶Šć community's need to protect information with the importance of privacy.
Stay up to date on the latest scams, software patches, tips, and more.
Concerned Your Computer Is Infected?
Storing Confidential Data
The Regulated Data Chart can be used to help you determine where to store your files in accordance with important data security rules and regulations.
Important:ĢżDue to constantly changing regulatory and grant changes, please consult with yourĢżData Security Officer (DSO) to determine the safest place to store your confidential data.
Google Drive Security Guidelines
The Ļć½¶Šć Data Security Policy defines 3 categories of data: Public, Internal Use Only, and Confidential.
The Data Security Committee, General Counsel, and the universityās FERPA officer have informally agreed that an additional, 4th category of data will be added to the Data Security Policy that is even more sensitive than āConfidential.ā Data that falls in this additional category will not be allowed to be stored off-campus except with written permission (see below). Google Drive is off-campus, and thus data that falls in this category must not be stored on Google Drive.
Until a formal policy revision is made and approved, you should use the following as a guideline:
Restricted. Due to legal restrictions or security concerns, some legally protected and highly sensitive information must not be stored on Google Workspace or other ācloud-basedā systems without permission of the responsible Vice President or the Provostās Office. This information, much of which was formerly classified as āConfidential,ā includes:
Social Security Numbers
Financial or credit account numbers
Personal financial information (e.g. financial aid data)
Account log-in credentials
Driver's license number or state-issued identification number
Health and medical records, including HIPAA-protected information
Export-controlled information
Human-subject research information
Other sensitive information that the information sponsor or responsible Vice President has determined must remain on a secure Ļć½¶Šć server.
Confidential. FERPA data (i.e. student records) is generally defined as Confidential, and can be stored on Ļć½¶Šć Google Drive, except as noted above. Other Confidential data, except as noted above, can also be stored on Ļć½¶Šć Google Drive.
Internal Use Only: Acceptable to store on Ļć½¶Šć Google Drive. Ģż
Public: Acceptable to store on Ļć½¶Šć Google Drive
For more information, contactĢżsecurity@bc.edu.