rules for dealing with human subjects data

[Scott Bradner <sob () HARVARD EDU>]

do any of you know of any specific rules for university-based researchers
protecting data that involves personally identifiable info?
I know that some data sources include security instriuctions with their
data but not all do and that does not cover data generated by the
researcher him/herself.

e.g. "no computer that contains names matched with social security
numbers can be connected to the Internet"  (so as to avoid things like
http://www.aunty-spam.com/california-notifies-over-1-million-that-they-may-have-been-hacked/
)

Scott

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.