Data storage and management

Data management is the practice of collecting, keeping, and using data securely and efficiently, optimizing the use of data within the bounds of policy and regulation.

• Consultation to identify appropriate data classification:
  • Protected Level 1 (PL-1)/Confidential (High)
    • HIPAA compliant (Health Insurance Portability and Accountability Act)
    • Personally identifiable health information
    • PHI (Protected Health Information)
  • Protected Level 2 (PL-2)/ Moderately sensitive (Medium)
    • Individually identifiable human subject research data not containing PL-1 data elements and that the IRB (Institutional Review Board) or Campus Privacy Office have not determined is high risk. This includes human genomic data that can be re-identified using publicly available data.
    • Student record information protected by FERPA (Family Educational Rights and Privacy Act)
  • Protected Level 3 (PL-3)/ Public information (Low) 
    • Public directory information
    • Fully de-identified research information about people that is not PHI related (caution required as full de-identification is very difficult). The Information Security Office recommends consulting with the IRB or Campus Privacy Office (link sends e-mail) on de-identification.
• Keeps data in a safe location to ensure security and integrity
• Secure data transfer (SSH and Globus)