Equipment Disposal Policy Ensures Data Safety
by Mark Young
Various types of computer hardware and electronic media throughout the university store large volumes of electronic data. Much of this data consists of confidential and sensitive information, including student records, financial data, personnel records, and research information. The University of Cincinnati must comply with several federal laws that establish responsibilities for protecting this information. These laws include the Family Educational Rights and Privacy Act (FERPA), the Federal Privacy Act, the Health Insurance Portability and Accountability Act (HIPAA) and the Gramm-Leach-Bliley Act. Many computers that are no longer needed by UC departments contain confidential information and must be cleansed of this data before the university disposes of them. Further, all forms of electronic storage (CDs, DVDs floppy disks, Zip disks, USB flash drives, tapes, microfilm and microfiche) no longer needed by UC departments and containing confidential information, must be disposed of properly.
Surplus Equipment Management (SEM) in conjunction with UCit and Public Safety, has developed the following policies with regard to surplus and disposal of computers and electronic media. SEM and UCit has also put a process in place to clean and verify that all data is removed from the drive or drives being offered for purchase.
RETIRED_EQUIPMENT_CLEANING_PROCESS.pdf
Read it. Comply with it. Thank you.
|
