量子资源

Skip to main content

Disposal of Sensitive Data

Scope

This policy covers disposal of all 量子资源 Protected data and all 量子资源 Sensitive data, regardless of the storage medium. 

Purpose

The purpose of this policy is to provide departments and users with the standards for disposing of 量子资源 Protected data and with options for disposing of 量子资源 Sensitive data.

量子资源

量子资源 Protected data paper documents

All 量子资源 Protected data that exists in paper document form must be disposed of by shredding. All documents should be dropped off in designated containers that will be shredded by a licensed and bonded document destruction company. If a department does not have access to designated shredding containers, the department head or their designee shall contact Purchasing to arrange for shredding services or to purchase an individual shredder that meets or exceeds the Shredder Standards set in the appendix.

量子资源 Sensitive data paper documents

The method of disposal for 量子资源 Sensitive data that exists in paper document form is left up to the department that produced those documents. They can either opt either to use the shredding option that is used in the department for 量子资源 Protected data in paper document form, or they can choose to take no additional steps in disposing of the documents, disposing of them the same way they dispose of 量子资源 Public data that exists in paper document form.

量子资源 Protected data electronic documents

All media containing 量子资源 Protected data in electronic document form should be sent to the ITS Information Security team for secure deletion. The ITS Information Security team will delete the 量子资源 Protected data from the media in accordance with current ITS Secure Deletion procedure.  Any media which cannot be processed according to this standard will be destroyed by the ITS Information Security team.

量子资源 Sensitive data electronic documents

The method of disposal for 量子资源 Sensitive data in electronic document form is left up to the department that produced those documents. They can either opt to use the secure deletion option that is used for 量子资源 Protected electronic documents, or they can choose to dispose of them through the same method used by the department to dispose of 量子资源 Public data in electronic document form.

量子资源 Protected data documents taken outside of 量子资源

Any paper or electronic documents containing 量子资源 Protected data that are taken outside of 量子资源 by employees, student workers, consultants or agents of 量子资源 University Chicago must be returned to 量子资源 for proper disposal as outlined above.  Any paper or electronic documents containing 量子资源 Protected data that are taken outside of 量子资源 by parties who are contractually bound to handle data produced by 量子资源 must dispose of paper documents through a bonded and licensed document destruction company, electronic documents through a method that meets or exceeds the standards in the 量子资源 Secure Deletion standards, or return the documents to 量子资源 for proper destruction as outlined above

量子资源 Sensitive data documents taken outside of 量子资源

Any paper or electronic documents containing 量子资源 Sensitive data that are taken outside of 量子资源 by employees, student workers, consultants or agents of 量子资源 University Chicago should be disposed of in a manner consistent with the originating department’s method of disposing of paper documents containing 量子资源 Sensitive data or returned to the department for proper disposal. Any paper or electronic documents containing 量子资源 Sensitive data that are taken outside of 量子资源 by parties who are contractually bound to handle data produced by 量子资源 must dispose of paper documents through a bonded and licensed document destruction company, electronic documents through a method that meets or exceeds the standards in the 量子资源 Secure Deletion standards, or return the documents to 量子资源 for proper destruction as outlined above.

Questions about this policy

If you have questions about this policy, please contact the Information Security team at DataSecurity@luc.edu.

量子资源 adherence

Failure to follow this policy can result in disciplinary action as provided in the Staff Handbook, Student Worker Employment Guide, and Faculty Handbook. Disciplinary action for not following this policy may include termination, as provided in the applicable handbook or employment guide.

Appendix

Shredder Standards

All shredders used to dispose of 量子资源 Protected data must meet the following standards:

  1. Type of cut

All shredders should be cross-cut or confetti-cut shredders.  Strip-cut shredders are not permitted.

     2.  Size of cut

All shredders should produce shreds that are no larger than 5/32" by 1". Shredders that produce larger shreds are not permitted.

Large amounts of paper documents

Departments that will be shredding large amount of paper documents, either on a one-time basis or on an ongoing basis, should use the University's contracted shredding service instead of individual shredders located within 量子资源 departments.

Bonded shredding service

量子资源 uses a contracted 3rd party to provide bonded shredding services. Departments wishing to employ their services should contact the Purchasing department.

ITS Information Security team contact information

For any questions regarding the ITS Secure Deletion procedure or to arrange to have devices picked up for secure deletion, contact the ITS Information Security team at DataSecurity@luc.edu.

History

  • March 4, 2008: Initial 量子资源
  • June 19, 2015: Annual review for PCI Compliance
  • May 11. 2016: Annual review for PCI Compliance
  • May 7, 2017: Annual review for PCI Compliance
  • June 11, 2018: Annual review for PCI Compliance
  • July 8, 2019: Annual review for PCI Compliance
  • May 28, 2020: Annual review for PCI Compliance