Personally Owned Devices (phone, tablet, laptop, etc.)
Description of Service:
Any mobile phone, tablet, laptop, or other computing device that you own or use that is not owned by the university, including those for which the university pays a partial stipend.
Description of Compliance:
Personally owned devices typically should not be used to maintain or share the university’s sensitive data. In some cases, instructors may need to make use of Student Educational Records (protected by FERPA) on their personal devices in the course of their teaching. This may be done if the device is appropriately secured.
It is recommended that you secure your personal devices to protect both the university's data and your own.
The U-M Safe Computing website provides tips for securing your personal devices:
- Protect Personal Devices & Data
- Protect Your Personal Computer
- Protect Your Mobile Device (smart phones and tablets)
- Mobile Device Security When Traveling or Conducting Field Research
- Protect Your Data (back up your data and encrypt your files)
Key: Storage Permission Levels
Permitted with IIA Consultation
For IIA consultation, please contact the ITS Service Center
Using Personally Owned Devices (phone, tablet, laptop, etc.) with Data
Personally Owned Devices (phone, tablet, laptop, etc.) has the following Sensitive Data restrictions....
- Credit Card or Payment Card Industry (PCI) Information
- Export Controlled Research—ITAR or EAR
- Federal Information Security Management Act (FISMA) Data
- IT Security Information
- Private Personal Information (PPI)
- Protected Health Information—HIPAA
- Sensitive Identifiable Human Subject Research
- Social Security Numbers
- Student Loan Application Information—GLBA