Confidential Information

Regardless of how it is presented, all information is for the use of the ITaP Customer Service Center personnel only.  Staff are not share any information with personal identification, i.e. name, login, phone number, PUID, social security number, etc. with anyone not affiliated with the ITaP Customer Service Center.  Additionally, certain information, specifically, accounts receivables originating from the PUSH, Speech, Language and Hearing Clinics and the Pharmacy and incentive credit pay associated with participation in the Employee Wellness’ Healthy Purdue Initiative are protected by HIPAA.  This information should not be shared by the ITaP Customer Service Center staff with anyone.  If a staff member believes information has been shared outside the CSC, either intentionally or inadvertently, notify leadership immediately.

ITaP Customer Service Center staff should never provide information about anyone to inquiring persons.  FERPA regulations require that we restrict parents from receiving any information about a son or daughter with no exceptions.  Also, HIPAA restricts the sharing of covered medical and benefits information with anyone except the individual themselves.  ITaP Customer Service Center staff are not authorized to share HIPAA-protected information with anyone.  Passwords are to be protected by each individual.  Always refer requests for exceptions to leadership.  Protection of personal data should not be taken lightly. Personal data such as PUID numbers, date of birth, and address should never be recorded anywhere.

Access to electronic data, including files on network drives and e-mail, is governed by University Policy, and should not be granted to anyone other than the account owner without proper authorization.  If requested to provide data to someone besides the account owner, please see the Service Desk Manager.

Staff should not retain any sensitive or restricted information in files on local hard drives. If sensitive or restricted data is recorded in a FootPrints case, notify the Service Desk Manager. 

Information on classification of data can be found here: https://www.purdue.edu/securepurdue/data-handling/index.php