658
edits
Mhurlocker (talk | contribs) No edit summary |
Mhurlocker (talk | contribs) |
||
| Line 67: | Line 67: | ||
*The Social Security Number of a research subject is considered confidential information and should not be used to identify a research subject unless legally mandated. | *The Social Security Number of a research subject is considered confidential information and should not be used to identify a research subject unless legally mandated. | ||
*ITS shall be available to assist in identifying alternatives to use of Social Security Number. | *ITS shall be available to assist in identifying alternatives to use of Social Security Number. | ||
*In the event that the Social Security Number of a research subject must be maintained, a form, [https:// | *In the event that the Social Security Number of a research subject must be maintained, a form, [https://nebraskamed.service-now.com/esc Request to Use Social Security Number], must be completed and submitted the Information Security Office which will facilitate approval from the Institutional Review Board. In cases where the research subject Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures]. | ||
===Other=== | ===Other=== | ||
*The Social Security Number of someone in a category not previously defined is considered confidential information and should not be used to identify an individual unless legally mandated. | *The Social Security Number of someone in a category not previously defined is considered confidential information and should not be used to identify an individual unless legally mandated. | ||
*The information Security team shall be available to assist in identifying alternatives to use of Social Security Number. | *The information Security team shall be available to assist in identifying alternatives to use of Social Security Number. | ||
*In the event that the Social Security Number must be maintained, a form, [https:// | *In the event that the Social Security Number must be maintained, a form, [https://nebraskamed.service-now.com/esc Request to Use Social Security Number], must be completed and submitted to the Information Security Office which will facilitate approval from the Senior Associate Vice Chancellor for Business and Finance for approval. In cases where the Social Security Number must be stored in a database, the database use must comply with [https://info.unmc.edu/its-security/policies/procedures/database-security.html ITS Database Security Procedures]. | ||
===Approval/Disapproval Process=== | ===Approval/Disapproval Process=== | ||
The Information Security Office will notify unit management and the requestor of the decision to approve/disapprove the request. | The Information Security Office will notify unit management and the requestor of the decision to approve/disapprove the request. | ||