Legal References for Sensitive Data

Legal References for Sensitive Data

The following are meant to provide a framework of legal references for use in understanding, working with, and securing sensitive data. Although no link below specifically addresses research data, be sure to recognize that some research data must also be considered sensitive information.

• North Carolina Identity Theft Protection Act of 2005
• Health Insurance Portability and Accountability Act of 1996 (HIPAA)
• Family Educational Rights and Privacy Act (FERPA)
• Gramm Leach Bliley Act (GLBA)
• Payment Card Industry (PCI) Data Security Standard
• State Personnel Act
• North Carolina Public Records Act
• UNC-Chapel Hill FERPA policy
• UNC Health Care Policies and Forms - HIPAA Privacy and Security

• Administrative (Remedy, Financial)
• Advanced Computing (Research, Statistics)
• Blackboard (Educational Technology)
• Campus Information (Calendars, Directories)
• Communication (Phones, Conferencing)
• Data Storage (Backup, Recovery)
• Email (Lists, Webmail)
• Networking (Wireless, VPN)
• Security (Policy, Viruses)
• Software (MS Office, Operating System)
• Support (Laptops, Printing)
• Web (Browsers, Web Design)