Private Personal Information (PPI) is a category of sensitive information that is associated with an individual person, such as an employee, student, or donor. PPI should be accessed only on a strict need-to-know basis and handled and stored with care.
PPI is information that can be used to uniquely identify, contact, or locate a single person. Personal information that is “de-identified” (maintained in a way that does not allow association with a specific person) is not considered sensitive. Note that UMID numbers by themselves are not considered sensitive or private personal information.
University policies, contractual obligations, and federal and state laws and regulations require appropriate protection of PPI that is not publicly available. These regulations apply to PPI stored or transmitted via any type of media: electronic, paper, microfiche, and even verbal communication.
PPI does not include publicly available information that is lawfully made available to the general public from federal, state, or local government records.