Protected Data

State and Federal laws mandate certain types of personal and financial data must be protected from public access. CSUN maintains a list of the types of data that are protected.  Confidential data relates to personal and financial records. Sensitive data includes the list of confidential data and adds information pertaining to student records, employee records and university financial and legal data.

Confidential Data

Confidential data includes:

• Social security numbers
• Partial Social Security Numbers, e.g., XXX-XXX-5555
• Medical Information

• Health Records
• Account Numbers or Record Numbers
• Psychological Counseling Records
• Admission date or Discharge date
• Date of death
• Medical Device Identifiers or Serial Numbers
• Health Plan Beneficiary Numbers
• Certificate or License Numbers
• Biometric data that can be used as identifiers:
• full face photographic images, finger prints, voice prints, etc.

• Financial Account Numbers, e.g. Brokerage Account Numbers, Retirement Account Numbers, etc.
• PINs (Personal Identification Numbers)
• Bank Account or Debit Card Information
• Credit Card numbers
• Credit Card PINs
• Credit Card Expiration date
• Credit Card Service code
• Credit Card Verification code
• Passwords or Login credentials
• Driver’s license number, state identification card, and other forms of national or international identification (visas, passports, etc.)
• Vehicle Identification Numbers (VINs) or Vehicle serial numbers
• Vehicle License Plate Numbers
• Student Information of any student who has elected privacy under the Family Education Rights and Privacy Act of 1974 (FERPA), including:

• Directory information, e.g., name, address, telephone number, etc.,
• Major, Degrees, Awards, Honors
• Participation in activities and sports
• Height and Weight
• Dates of attendance
• Previous educational agencies/institutions

• Employee Information

• Any relevant evidence related to the dismissal, suspension, or demotion

• Any other unique identifying number, characteristic, or code
• Combinations of Data
• Birth date combined with last four of SSN and name
• Credit card numbers with cardholder name
• Tax ID with name
• Driver’s license number, state identification card, and other forms of national or international identification in combination with name
• Social Security number and name

Sensitive Data

Sensitive data includes:

• Birth date (full: mm-dd-yy)
• Birth date (partial: mm-dd only)
• Mother’s maiden name
• Individual Student Records

• Student Grades, although aggregate grades are not protected data
• Courses taken
• Schedule
• Test Scores
• Advising records
• Educational services received
• Disciplinary actions           

Individual Employee Records

• Employee net salary
• Employment history
• Home address
• Personal telephone numbers
• Personal email address
• Parents and other family members names
• Payment history
• Employee evaluations
• Background investigations
• Biometric information
• Electronic or digitized signatures
• Private key (digital certificate)
• Birthplace (City, State, Country)
• Ethnicity
• Gender
• Marital Status
• Personal characteristics
• Physical description

Other

• Legal investigations conducted by the University
• Sealed bids
• Trade secrets or intellectual property such as research activities
• Location of assets
• Linking a person with the specific subject about which the library user has
  requested information or materials
• Vulnerability/security information related to a campus or system