Social Security Number - Revision history

Mhurlocker: /* Student Education Record Information */

2025-04-11T19:01:37Z

Student Education Record Information

Mhurlocker: /* Additional Information */

2025-04-11T15:41:53Z

Additional Information

← Older revision		Revision as of 10:41, April 11, 2025
Line 105:		Line 105:
	*[https://catalog.unmc.edu/ Student Handbook]		*[https://catalog.unmc.edu/ Student Handbook]

	This page maintained by [mailto:~~dpanowic~~@unmc.edu mh].		This page maintained by [mailto:mhurlocker@unmc.edu mh].

Mhurlocker: /* Additional Information */

2025-04-11T14:47:32Z

Additional Information

← Older revision		Revision as of 09:47, April 11, 2025
Line 105:		Line 105:
	*[https://catalog.unmc.edu/ Student Handbook]		*[https://catalog.unmc.edu/ Student Handbook]

	This page maintained by [mailto:dpanowic@unmc.edu ~~dkp~~].		This page maintained by [mailto:dpanowic@unmc.edu mh].

Mhurlocker: /* Employee Information */

2025-03-10T18:43:16Z

Employee Information

← Older revision		Revision as of 13:43, March 10, 2025
Line 67:		Line 67:
	*The Social Security Number of a research subject is considered confidential information and should not be used to identify a research subject unless legally mandated.		*The Social Security Number of a research subject is considered confidential information and should not be used to identify a research subject unless legally mandated.
	*ITS shall be available to assist in identifying alternatives to use of Social Security Number.		*ITS shall be available to assist in identifying alternatives to use of Social Security Number.
	*In the event that the Social Security Number of a research subject must be maintained, a form, [https://~~support~~.~~security~~.~~unmc.edu/exceptions~~/~~ssn~~ Request to Use Social Security Number], must be completed and submitted the Information Security Office which will facilitate approval from the Institutional Review Board. In cases where the research subject Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number of a research subject must be maintained, a form, [https://nebraskamed.service-now.com/esc Request to Use Social Security Number], must be completed and submitted the Information Security Office which will facilitate approval from the Institutional Review Board. In cases where the research subject Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].
	===Other===		===Other===
	*The Social Security Number of someone in a category not previously defined is considered confidential information and should not be used to identify an individual unless legally mandated.		*The Social Security Number of someone in a category not previously defined is considered confidential information and should not be used to identify an individual unless legally mandated.
	*The information Security team shall be available to assist in identifying alternatives to use of Social Security Number.		*The information Security team shall be available to assist in identifying alternatives to use of Social Security Number.
	*In the event that the Social Security Number must be maintained, a form, [https://~~support~~.~~security~~.~~unmc.edu/exceptions~~/~~ssn~~ Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Senior Associate Vice Chancellor for Business and Finance for approval. In cases where the Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number must be maintained, a form, [https://nebraskamed.service-now.com/esc Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Senior Associate Vice Chancellor for Business and Finance for approval. In cases where the Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].
	===Approval/Disapproval Process===		===Approval/Disapproval Process===
	The Information Security Office will notify unit management and the requestor of the decision to approve/disapprove the request.		The Information Security Office will notify unit management and the requestor of the decision to approve/disapprove the request.

Mhurlocker at 18:40, March 10, 2025

2025-03-10T18:40:27Z

← Older revision		Revision as of 13:40, March 10, 2025
Line 58:		Line 58:
	*Information Technology Services (ITS) shall be available to assist in identifying alternatives to use of Social Security Number. Alternatives which should be considered, include but are not limited to:		*Information Technology Services (ITS) shall be available to assist in identifying alternatives to use of Social Security Number. Alternatives which should be considered, include but are not limited to:
	:*UNMC Student Number		:*UNMC Student Number
	*In the event that the Social Security Number of a student must be maintained, a form, [https://~~support~~.~~security~~.~~unmc.edu/exceptions~~/~~ssn~~ Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Assistant Vice Chancellor for Academic Affairs/Student Affairs. If Social Security Number must be used and stored in a database, the use of the student’s Social Security Number must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number of a student must be maintained, a form, [https://nebraskamed.service-now.com/esc Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Assistant Vice Chancellor for Academic Affairs/Student Affairs. If Social Security Number must be used and stored in a database, the use of the student’s Social Security Number must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].
	===Employee Information ===		===Employee Information ===
	*The Social Security Number of an employee is considered confidential information and should not be used to identify an employee unless legally mandated.		*The Social Security Number of an employee is considered confidential information and should not be used to identify an employee unless legally mandated.

Mhurlocker: /* Definitions */

2023-08-16T14:35:51Z

Definitions

← Older revision		Revision as of 09:35, August 16, 2023
Line 83:		Line 83:
	The Information Security Office will maintain the exception forms. The forms will be reviewed periodically to verify that the exception is still valid.		The Information Security Office will maintain the exception forms. The forms will be reviewed periodically to verify that the exception is still valid.
	===Definitions===		===Definitions===
	'''''Information Security'''~~'' is the ability~~ to control access and protect information from unauthorized alteration, destruction, loss or ~~accidental or intentional~~ disclosure ~~to unauthorized~~ persons.		'''Information Security'''

			Policies and practices designed to control access and protect information from unauthorized access, alteration, destruction, loss or disclosure.

			'''Workforce'''

			Employees, medical staff, volunteers, trainees and other persons whose conduct, in the performance of work for Nebraska Medicine/UNMC, is under the direct control of Nebraska Medicine/UNMC, whether or not they are paid by Nebraska Medicine/UNMC.

	'''''Workforce''''' means students, employees, the medical staff, volunteers, trainees, and other persons whose conduct, in the performance of work for UNMC, is under the direct control of UNMC, whether or not they are paid by UNMC.
	==Additional Information==		==Additional Information==
	*Contact [mailto:lbazis@unmc.edu Chief Info Security Officer, IT Information Security], 402.559.2882		*Contact [mailto:lbazis@unmc.edu Chief Info Security Officer, IT Information Security], 402.559.2882

Afaylor: /* Additional Information */ updated Student Handbook link

2022-01-24T14:52:13Z

Additional Information: updated Student Handbook link

← Older revision		Revision as of 09:52, January 24, 2022
Line 98:		Line 98:
	*[https://info.unmc.edu/its-security/policies/procedures/destruction-confinfo.html Destruction of Private and Confidential Information Procedures]		*[https://info.unmc.edu/its-security/policies/procedures/destruction-confinfo.html Destruction of Private and Confidential Information Procedures]
	*[http://info.unmc.edu/wiki/index.php/Faculty_Handbook Faculty Handbook]		*[http://info.unmc.edu/wiki/index.php/Faculty_Handbook Faculty Handbook]
	*[~~http~~://~~www~~.unmc.edu/~~studentservices/_documents/handbook.pdf~~ Student Handbook]		*[https://catalog.unmc.edu/ Student Handbook]

	This page maintained by [mailto:dpanowic@unmc.edu dkp].		This page maintained by [mailto:dpanowic@unmc.edu dkp].

Daniel.carlson: Updated broken links

2020-03-10T13:53:27Z

Updated broken links

Daniel.carlson: Updated broken links

2020-02-20T14:49:57Z

Updated broken links

← Older revision		Revision as of 09:49, February 20, 2020
Line 58:		Line 58:
	*Information Technology Services (ITS) shall be available to assist in identifying alternatives to use of Social Security Number. Alternatives which should be considered, include but are not limited to:		*Information Technology Services (ITS) shall be available to assist in identifying alternatives to use of Social Security Number. Alternatives which should be considered, include but are not limited to:
	:*UNMC Student Number		:*UNMC Student Number
	*In the event that the Social Security Number of a student must be maintained, a form, [~~http~~://~~app1~~.unmc.edu/~~forms~~/~~its/ssn_request.cfm~~ Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Assistant Vice Chancellor for Academic Affairs/Student Affairs. If Social Security Number must be used and stored in a database, the use of the student’s Social Security Number must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number of a student must be maintained, a form, [https://support.security.unmc.edu/exceptions/ssn Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Assistant Vice Chancellor for Academic Affairs/Student Affairs. If Social Security Number must be used and stored in a database, the use of the student’s Social Security Number must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].
	===Employee Information ===		===Employee Information ===
	*The Social Security Number of an employee is considered confidential information and should not be used to identify an employee unless legally mandated.		*The Social Security Number of an employee is considered confidential information and should not be used to identify an employee unless legally mandated.

Dpanowic at 13:25, October 21, 2019

2019-10-21T13:25:26Z

← Older revision		Revision as of 14:01, April 11, 2025
Line 58:		Line 58:
	*Information Technology Services (ITS) shall be available to assist in identifying alternatives to use of Social Security Number. Alternatives which should be considered, include but are not limited to:		*Information Technology Services (ITS) shall be available to assist in identifying alternatives to use of Social Security Number. Alternatives which should be considered, include but are not limited to:
	:*UNMC Student Number		:*UNMC Student Number
	*In the event that the Social Security Number of a student must be maintained, a form, [https://nebraskamed.service-now.com/esc Request to Use Social Security Number], ~~must be completed~~ and ~~submitted~~ to the Information Security Office which will facilitate approval from the Assistant Vice Chancellor for Academic Affairs/Student Affairs. If Social Security Number must be used and stored in a database, the use of the student’s Social Security Number must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number of a student must be maintained, a form, [https://nebraskamed.service-now.com/esc Request to Use Social Security Number], type in “SSN” in the search bar, and select the catalog item “SSN Usage Policy Exception”, complete and submit to the Information Security Office which will facilitate approval from the Assistant Vice Chancellor for Academic Affairs/Student Affairs. If Social Security Number must be used and stored in a database, the use of the student’s Social Security Number must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].
	===Employee Information ===		===Employee Information ===
	*The Social Security Number of an employee is considered confidential information and should not be used to identify an employee unless legally mandated.		*The Social Security Number of an employee is considered confidential information and should not be used to identify an employee unless legally mandated.
	*The Information Security team shall be available to assist in identifying alternatives to the use of the Social Security Number. Alternatives which should be considered, include but are not limited to:		*The Information Security team shall be available to assist in identifying alternatives to the use of the Social Security Number. Alternatives which should be considered, include but are not limited to:
	:*Personnel (SAP) Number		:*Personnel (SAP) Number
	*In the event that the Social Security Number of an employee must be maintained, a form, [https://~~support~~.~~security~~.~~unmc.edu~~/~~exceptions/ssn~~ Request to Use Social Security Number], ~~must be completed~~ and ~~submitted~~ to the Information Security Office who will facilitate approval of the Assistant Vice Chancellor for Human Resources for approval. In cases where the employee Social Security Number must be stored in a database, the database must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number of an employee must be maintained, a form,[https://nebraskamed.service-now.com/esc Request to Use Social Security Number], type in “SSN” in the search bar, and select the catalog item “SSN Usage Policy Exception”, complete and submit to the Information Security Office who will facilitate approval of the Assistant Vice Chancellor for Human Resources for approval. In cases where the employee Social Security Number must be stored in a database, the database must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].
	===Research Information ===		===Research Information ===
	*The Social Security Number of a research subject is considered confidential information and should not be used to identify a research subject unless legally mandated.		*The Social Security Number of a research subject is considered confidential information and should not be used to identify a research subject unless legally mandated.
	*ITS shall be available to assist in identifying alternatives to use of Social Security Number.		*ITS shall be available to assist in identifying alternatives to use of Social Security Number.
	*In the event that the Social Security Number of a research subject must be maintained, a form, [https://nebraskamed.service-now.com/esc Request to Use Social Security Number], ~~must be completed~~ and ~~submitted~~ the Information Security Office which will facilitate approval from the Institutional Review Board. In cases where the research subject Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number of a research subject must be maintained, a form, [https://nebraskamed.service-now.com/esc Request to Use Social Security Number], type in “SSN” in the search bar, and select the catalog item “SSN Usage Policy Exception”, complete and submit to the Information Security Office which will facilitate approval from the Institutional Review Board. In cases where the research subject Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].
	===Other===		===Other===
	*The Social Security Number of someone in a category not previously defined is considered confidential information and should not be used to identify an individual unless legally mandated.		*The Social Security Number of someone in a category not previously defined is considered confidential information and should not be used to identify an individual unless legally mandated.
	*The information Security team shall be available to assist in identifying alternatives to use of Social Security Number.		*The information Security team shall be available to assist in identifying alternatives to use of Social Security Number.
	*In the event that the Social Security Number must be maintained, a form, [https://nebraskamed.service-now.com/esc Request to Use Social Security Number], ~~must be completed~~ and ~~submitted~~ to the Information Security Office which will facilitate approval from the Senior Associate Vice Chancellor for Business and Finance for approval. In cases where the Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number must be maintained, a form, [https://nebraskamed.service-now.com/esc Request to Use Social Security Number], type in “SSN” in the search bar, and select the catalog item “SSN Usage Policy Exception”, complete and submit to the Information Security Office which will facilitate approval from the Senior Associate Vice Chancellor for Business and Finance for approval. In cases where the Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].
	===Approval/Disapproval Process===		===Approval/Disapproval Process===
	The Information Security Office will notify unit management and the requestor of the decision to approve/disapprove the request.		The Information Security Office will notify unit management and the requestor of the decision to approve/disapprove the request.

← Older revision		Revision as of 08:53, March 10, 2020
Line 63:		Line 63:
	*The Information Security team shall be available to assist in identifying alternatives to the use of the Social Security Number. Alternatives which should be considered, include but are not limited to:		*The Information Security team shall be available to assist in identifying alternatives to the use of the Social Security Number. Alternatives which should be considered, include but are not limited to:
	:*Personnel (SAP) Number		:*Personnel (SAP) Number
	*In the event that the Social Security Number of an employee must be maintained, a form, [~~http~~://~~app1~~.unmc.edu/~~forms~~/~~its/ssn_request.cfm~~ Request to Use Social Security Number], must be completed and submitted to the Information Security Office who will facilitate approval of the Assistant Vice Chancellor for Human Resources for approval. In cases where the employee Social Security Number must be stored in a database, the database must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number of an employee must be maintained, a form, [https://support.security.unmc.edu/exceptions/ssn Request to Use Social Security Number], must be completed and submitted to the Information Security Office who will facilitate approval of the Assistant Vice Chancellor for Human Resources for approval. In cases where the employee Social Security Number must be stored in a database, the database must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].
	===Research Information ===		===Research Information ===
	*The Social Security Number of a research subject is considered confidential information and should not be used to identify a research subject unless legally mandated.		*The Social Security Number of a research subject is considered confidential information and should not be used to identify a research subject unless legally mandated.
	*ITS shall be available to assist in identifying alternatives to use of Social Security Number.		*ITS shall be available to assist in identifying alternatives to use of Social Security Number.
	*In the event that the Social Security Number of a research subject must be maintained, a form, [~~http~~://~~app1~~.unmc.edu/~~forms~~/~~its/ssn_request.cfm~~ Request to Use Social Security Number], must be completed and submitted the Information Security Office which will facilitate approval from the Institutional Review Board. In cases where the research subject Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number of a research subject must be maintained, a form, [https://support.security.unmc.edu/exceptions/ssn Request to Use Social Security Number], must be completed and submitted the Information Security Office which will facilitate approval from the Institutional Review Board. In cases where the research subject Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].
	===Other===		===Other===
	*The Social Security Number of someone in a category not previously defined is considered confidential information and should not be used to identify an individual unless legally mandated.		*The Social Security Number of someone in a category not previously defined is considered confidential information and should not be used to identify an individual unless legally mandated.
	*The information Security team shall be available to assist in identifying alternatives to use of Social Security Number.		*The information Security team shall be available to assist in identifying alternatives to use of Social Security Number.
	*In the event that the Social Security Number must be maintained, a form, [~~http~~://~~app1~~.unmc.edu/~~forms~~/~~its/ssn_request.cfm~~ Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Senior Associate Vice Chancellor for Business and Finance for approval. In cases where the Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number must be maintained, a form, [https://support.security.unmc.edu/exceptions/ssn Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Senior Associate Vice Chancellor for Business and Finance for approval. In cases where the Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].
	===Approval/Disapproval Process===		===Approval/Disapproval Process===
	The Information Security Office will notify unit management and the requestor of the decision to approve/disapprove the request.		The Information Security Office will notify unit management and the requestor of the decision to approve/disapprove the request.
Line 93:		Line 93:
	*UNMC Policy No. 6073, [[Transporting Protected Health Information]]		*UNMC Policy No. 6073, [[Transporting Protected Health Information]]
	*UNMC Policy No. 1098, [http://wiki.unmc.edu/index.php?title=Corrective/Disciplinary_Action Corrective and Disciplinary Action]		*UNMC Policy No. 1098, [http://wiki.unmc.edu/index.php?title=Corrective/Disciplinary_Action Corrective and Disciplinary Action]
	*[~~http~~://~~app1~~.unmc.edu/~~forms~~/~~its/ssn_request.cfm~~ Request to Use Social Security Number] Form		*[https://support.security.unmc.edu/exceptions/ssn Request to Use Social Security Number] Form
	*[https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures]		*[https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures]
	*[https://info.unmc.edu/its-security/policies/plan.html Information Security Plan]		*[https://info.unmc.edu/its-security/policies/plan.html Information Security Plan]

← Older revision		Revision as of 08:25, October 21, 2019
Line 52:		Line 52:
	*UNMC is responsible for safeguarding and protecting Social Security Numbers against loss, tampering and disclosure. The safeguarding of confidential information in any form includes when the information is stored and/or being transferred outside the facility (see UNMC Policy No. 6073, [[Transporting Protected Health Information]]).		*UNMC is responsible for safeguarding and protecting Social Security Numbers against loss, tampering and disclosure. The safeguarding of confidential information in any form includes when the information is stored and/or being transferred outside the facility (see UNMC Policy No. 6073, [[Transporting Protected Health Information]]).
	*UNMC shall reasonably mitigate or reduce any harmful effects that may result from privacy breaches involving Social Security Numbers.		*UNMC shall reasonably mitigate or reduce any harmful effects that may result from privacy breaches involving Social Security Numbers.
	*Workforce members who suspect a Social Security Number violation must report it immediately to their respective manager, the Privacy Office, or the Information Security Office. A full investigation of the suspected violation shall be conducted. Staff who wish to remain anonymous may report the suspected violation to the Compliance Hotline at 1-~~866~~-~~568~~-~~5430~~. Sanctions shall be imposed for substantiated breaches or failure to report suspected violations.		*Workforce members who suspect a Social Security Number violation must report it immediately to their respective manager, the Privacy Office, or the Information Security Office. A full investigation of the suspected violation shall be conducted. Staff who wish to remain anonymous may report the suspected violation to the Compliance Hotline at 1-844-348-9584. Sanctions shall be imposed for substantiated breaches or failure to report suspected violations.
	*Sanctions for violations of privacy or information security policies may include scholastic or employee corrective action up to and including student dismissal or termination of employment. (See UNMC Policy No. 1098, [http://wiki.unmc.edu/index.php?title=Corrective/Disciplinary_Action Corrective and Disciplinary Action Policy]).		*Sanctions for violations of privacy or information security policies may include scholastic or employee corrective action up to and including student dismissal or termination of employment. (See UNMC Policy No. 1098, [http://wiki.unmc.edu/index.php?title=Corrective/Disciplinary_Action Corrective and Disciplinary Action Policy]).

	===Student Education Record Information===		===Student Education Record Information===
	*The Social Security Number of a student is considered confidential information and must not be used to identify a student.		*The Social Security Number of a student is considered confidential information and must not be used to identify a student.
Line 60:		Line 59:
	:*UNMC Student Number		:*UNMC Student Number
	*In the event that the Social Security Number of a student must be maintained, a form, [http://app1.unmc.edu/forms/its/ssn_request.cfm Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Assistant Vice Chancellor for Academic Affairs/Student Affairs. If Social Security Number must be used and stored in a database, the use of the student’s Social Security Number must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number of a student must be maintained, a form, [http://app1.unmc.edu/forms/its/ssn_request.cfm Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Assistant Vice Chancellor for Academic Affairs/Student Affairs. If Social Security Number must be used and stored in a database, the use of the student’s Social Security Number must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].

	===Employee Information ===		===Employee Information ===
	*The Social Security Number of an employee is considered confidential information and should not be used to identify an employee unless legally mandated.		*The Social Security Number of an employee is considered confidential information and should not be used to identify an employee unless legally mandated.
Line 66:		Line 64:
	:*Personnel (SAP) Number		:*Personnel (SAP) Number
	*In the event that the Social Security Number of an employee must be maintained, a form, [http://app1.unmc.edu/forms/its/ssn_request.cfm Request to Use Social Security Number], must be completed and submitted to the Information Security Office who will facilitate approval of the Assistant Vice Chancellor for Human Resources for approval. In cases where the employee Social Security Number must be stored in a database, the database must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number of an employee must be maintained, a form, [http://app1.unmc.edu/forms/its/ssn_request.cfm Request to Use Social Security Number], must be completed and submitted to the Information Security Office who will facilitate approval of the Assistant Vice Chancellor for Human Resources for approval. In cases where the employee Social Security Number must be stored in a database, the database must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].

	===Research Information ===		===Research Information ===
	*The Social Security Number of a research subject is considered confidential information and should not be used to identify a research subject unless legally mandated.		*The Social Security Number of a research subject is considered confidential information and should not be used to identify a research subject unless legally mandated.
	*ITS shall be available to assist in identifying alternatives to use of Social Security Number.		*ITS shall be available to assist in identifying alternatives to use of Social Security Number.
	*In the event that the Social Security Number of a research subject must be maintained, a form, [http://app1.unmc.edu/forms/its/ssn_request.cfm Request to Use Social Security Number], must be completed and submitted the Information Security Office which will facilitate approval from the Institutional Review Board. In cases where the research subject Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number of a research subject must be maintained, a form, [http://app1.unmc.edu/forms/its/ssn_request.cfm Request to Use Social Security Number], must be completed and submitted the Information Security Office which will facilitate approval from the Institutional Review Board. In cases where the research subject Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].

	===Other===		===Other===
	*The Social Security Number of someone in a category not previously defined is considered confidential information and should not be used to identify an individual unless legally mandated.		*The Social Security Number of someone in a category not previously defined is considered confidential information and should not be used to identify an individual unless legally mandated.
	*The information Security team shall be available to assist in identifying alternatives to use of Social Security Number.		*The information Security team shall be available to assist in identifying alternatives to use of Social Security Number.
	*In the event that the Social Security Number must be maintained, a form, [http://app1.unmc.edu/forms/its/ssn_request.cfm Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Senior Associate Vice Chancellor for Business and Finance for approval. In cases where the Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].		*In the event that the Social Security Number must be maintained, a form, [http://app1.unmc.edu/forms/its/ssn_request.cfm Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Senior Associate Vice Chancellor for Business and Finance for approval. In cases where the Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures].

	===Approval/Disapproval Process===		===Approval/Disapproval Process===
	The Information Security Office will notify unit management and the requestor of the decision to approve/disapprove the request.		The Information Security Office will notify unit management and the requestor of the decision to approve/disapprove the request.
Line 93:		Line 88:
	==Additional Information==		==Additional Information==
	*Contact [mailto:lbazis@unmc.edu Chief Info Security Officer, IT Information Security], 402.559.2882		*Contact [mailto:lbazis@unmc.edu Chief Info Security Officer, IT Information Security], 402.559.2882
			*Compliance Hotline - 1-844-348-9584
	*UNMC Policy No. 6045, [http://wiki.unmc.edu/index.php?title=Privacy/Confidentiality Privacy, Confidentiality and Security of Patient and Proprietary Information]		*UNMC Policy No. 6045, [http://wiki.unmc.edu/index.php?title=Privacy/Confidentiality Privacy, Confidentiality and Security of Patient and Proprietary Information]
	*UNMC Policy No. 6051, [http://wiki.unmc.edu/index.php?title=Computer_Use/Electronic_Information Computer Use and Electronic Information Security]		*UNMC Policy No. 6051, [http://wiki.unmc.edu/index.php?title=Computer_Use/Electronic_Information Computer Use and Electronic Information Security]