![]() Unacceptable uage also may cause access to form creation tools to be suspended. When content is obviously unacceptable, UNH WMD will immediately remove the content prior to contacting the site owner. If the site or content owner cannot be contacted or is no longer at UNH, that content will be administered by WMD and can be removed if deemed inaccurate or inappropriate. If inappropriate or inaccurate activity is discovered, UNH WMD will contact the account user to discuss the issue. PCI-DSS Standard - Governs credit card transaction processing protectionsĪlthough UNH AT does not monitor or regularly review website content, it reserves the right to remove at any time any content that it considers to violate this standard or any other UNH policies. Red Flags Rule - Requires detection, reporting, and prevention of identity theft New Hampshire RSA 359-c20 - Governs information security breach notification requirements HIPAA (Health Insurance Portability and Accountability Act)įERPA (Family Educational Rights and Privacy Act)ĬJIS (Criminal Justice Information Services) Information protection is governed by federal laws, state regulations, and University policies, including: Personal risk if a data breach happens while you are not following policy and law.Financial and reputational damage to the university.Harm to individuals whose privacy is breached, such as identity theft. ![]() Failure to protect information can have serious consequences: Users are responsible for collecting and protecting information in accordance with all UNH and USNH policies. Training for Drupal webforms may be offered periodically through the Academic Technology training calendar. Supportįor more information, please contact WMD. Data kept in Drupal longer than 30 days may be automatically deleted by WMD. Processing collected informationĬollected information should be downloaded and deleted from Drupal immediately, if possible, and kept in Drupal no longer than 30 days maximum. If you need to collect other information classified as sensitive or any information classified as restricted, contact WMD to discuss potential information collection and storage options that ensure compliance with UNH policy and regulatory requirements. Therefore, it is inadequate protection for any information classified as restricted and most information classified as sensitive.Įxamples of information that can be included: Webform information is transmitted via email and stored in the same location as website content.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |