Re: Student Identity Verification

["Davis, Ken" <kend () IT UCLA EDU>]

Regarding government issued military ID cards:

See Section 18 U.S. Code § 701. Official badges, identification cards, other insignia.  

--Ken

-----Original Message-----
From: The EDUCAUSE Security Community Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of George J. 
Silowash
Sent: Tuesday, June 4, 2019 8:14 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Student Identity Verification

Hello,

Our online graduate program is looking into the process of verifying student identities during the application process. 
Right now, they would like to collect a copy of a  government issued ID collected during the application process and 
store it into our encrypted records management system (OnBase). This ID could be a driver license, state ID, or 
government/military ID.

If you verify student identity (either on campus or for online programs), I would like to hear how you do it.  I also 
have a few questions that maybe someone can help with:

1. How long do you keep the ID in the system? (I am proposing someone review it when the student applies then the copy 
is discarded but sometime of indicator is retained stating it was reviewed by an employee - mainly for GDPR & general 
data minimization)

2. Are there any state or federal laws or regulations that prohibit the copying and/or storage of government 
identification?

V/R,
George
---------------------------------------------------------------------------
George J. Silowash, MSIA, CISSP-ISSMP, CCFP, GCFE, GCFA Chief Information Security Officer Norwich University
158 Harmon Drive
Northfield, VT  05663