Storing Restricted and Sensitive Data in Box @ UNH

Box @ UNH provides enhanced security via SSL connection and encryption of data at rest; however, some data is inappropriate for storage in Box @ UNH as well as most university general use servers and fileshares.

  • UNH Data Classifications and Storage

    • Public Data (1 lock): No restrictions on storage in Box @ UNH.
    • Sensitive data (2 lock): No restrictions on storage in Box @ UNH
    • Restricted (legally protected) data (3 locks): Certain information should not be stored in Box @ UNH. Contact UNH ISS for appropriate solutions.
  • Don’t store unnecessary data:

    • Scan existing files with Identity Finder before transfer to Box @ UNH to locate SSN’s and credit card numbers.
    • Old and outdated files no longer useful (e.g., "just in case")
    • No business need for the data (or obsolete business need).
    • Legal exposure; data is discoverable in lawsuits.
    • Define and use a record retention policy (USNH Policy)
  • Box @ UNH not accepted nor recommended for:

    • Protected health information (PHI) subject to HIPAA/HITECH regulations
      • Understand "cover entity"
      • PHI not covered by HIPAA still must be protected
    • Credit Card information
      • Customer data; does not apply to P-Cards
      • Policy, not law
    • Export controlled research data
      • Sharing risk
  • Be wary of using box sync when storing restricted data.

    • Places inappropriate information on local devices
    • Use only with encrypted devices when storing restricted data
Custom Fields
  • Application: Box@UNH
  • Department: Enterprise Collaboration & Messaging
Attached Files
There are no attachments for this article.
Related Articles RSS Feed
Box for Office: Plugin Not Appearing in File Menu
Viewed 825 times since Mon, Mar 14, 2016
Using Search in Box @ UNH
Viewed 209 times since Wed, Mar 8, 2017
Policies on IT resources
Viewed 1272 times since Wed, Mar 25, 2015
How to Spot a “Phishing” Email
Viewed 695 times since Tue, Feb 2, 2016
Network Registration & Vulnerability Scans
Viewed 693 times since Wed, Apr 29, 2015
Uploading Emails to Box Directly
Viewed 210 times since Wed, Mar 8, 2017
System Center 2012 Endpoint Protection for Mac Installation
Viewed 2519 times since Wed, Aug 12, 2015
Good Security Practices to Adopt at Work/School, and at Home
Viewed 93 times since Fri, Jul 14, 2017
Box Mobile App: How to login
Viewed 629 times since Mon, Apr 25, 2016
What are Box notes?
Viewed 572 times since Wed, Sep 16, 2015