Storing High-Risk Confidential Information

No member of the Harvard community and no vendor to Harvard is permitted to store High Risk Confidential Information (other than their own) in any way relating to Harvard or Harvard sponsored activities locally on any individual user computer. Level 4 High Risk Confidential Information must only be stored on Harvard approved servers or media.

Non-electronic records containing High Risk confidential information must kept in secure locked containers except when in use.

People or groups at Harvard who wish to collect or work with High Risk Confidential Information or to contract with a vendor to collect or work with such information must obtain prior approval from the School and/or University CIO.

See also: Advisories