To help make collaboration easier on campus, UAB allows storage of Restricted/PHI data in SharePoint and OneDrive, with some restrictions.
What is allowed?
- Storage of Restricted/PHI data in Microsoft SharePoint and OneDrive.
- Emailing of Restricted/PHI data between uab.edu and uabmc.edu email addresses.
What is not allowed?
- Storage of credit card numbers.
- Emailing or forwarding Restrict/PHI data to outside or personal email addresses.
What can you do to protect yourself and UAB?
- Label all data. In both Box and OneDrive, you can label data as Public, Sensitive or Restricted. In OneDrive, all files will automatically be labeled as Sensitive, and documents that have a character string that appears to be a Social Security number will be labeled “Restricted” automatically.
- Be cautious about who has access to the data you store. Review guidance on sharing data in Office 365.
UAB has updated the Data Protection Rule to reflect the changes.