Educause Security Discussion mailing list archives

Re: rules for dealing with human subjects data


From: Dan Updegrove <updegrove () MAIL UTEXAS EDU>
Date: Sun, 20 Mar 2005 13:10:41 -0600

Scott,

No such policy here at UT, although we're engaged in a review of security
in the research domain generally as well as the training provided on
security in the human subjects domain.

I'd be most interested in exemplars.

Thanks,
Dan


At 12:39 PM 3/20/2005, Scott Bradner wrote:
do any of you know of any specific rules for university-based researchers
protecting data that involves personally identifiable info?
I know that some data sources include security instriuctions with their
data but not all do and that does not cover data generated by the
researcher him/herself.

e.g. "no computer that contains names matched with social security
numbers can be connected to the Internet"  (so as to avoid things like
http://www.aunty-spam.com/california-notifies-over-1-million-that-they-may-have-been-hacked/
)

Scott

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/groups/.


VP  for Information Technology          Phone (512) 232-9610
The University of Texas at Austin       Fax (512) 232-9607
FAC 248 (Mail code: G9800)              d.updegrove () its utexas edu
P.O. Box
7407                                   http://web.ausitn.utexas.edu/dau2
Austin, TX 78713-7407

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.

Current thread: