Student Identity Verification

["George J. Silowash" <gsilowas () NORWICH EDU>]

Hello,

Our online graduate program is looking into the process of verifying student identities during the application process. 
Right now, they would like to collect a copy of a  government issued ID collected during the application process and 
store it into our encrypted records management system (OnBase). This ID could be a driver license, state ID, or 
government/military ID.

If you verify student identity (either on campus or for online programs), I would like to hear how you do it.  I also 
have a few questions that maybe someone can help with:

1. How long do you keep the ID in the system? (I am proposing someone review it when the student applies then the copy 
is discarded but sometime of indicator is retained stating it was reviewed by an employee - mainly for GDPR & general 
data minimization)

2. Are there any state or federal laws or regulations that prohibit the copying and/or storage of government 
identification?

V/R,
George
---------------------------------------------------------------------------
George J. Silowash, MSIA, CISSP-ISSMP, CCFP, GCFE, GCFA
Chief Information Security Officer
Norwich University
158 Harmon Drive
Northfield, VT  05663