Students

As a U-M student, you are responsible for learning how to protect and secure information about yourself, as well as university information that you may have access to. You need to protect your reputation, protect yourself, protect your computer and other electronic devices, and protect your data.

Commonly Used Data Types

  • According to university policy, data will typically be classified as sensitive if any of the following are true: Unauthorized disclosure may have serious adverse effects on the university’s reputation, resources, or services or on individuals It is protected under federal or state regulations. There are proprietary, ethical, or privacy considerations.
  • Personally Identifiable Information (PII) is a category of sensitive information that is associated with an individual person, such as an employee, student, or donor. PII should be accessed only on a strictly need-to-know basis and handled and stored with care. PII is information that can be used to uniquely identify, contact, or locate a single person. Personal information that is “de-identified...
  • Sensitive identifiable human subject research data is regulated by the Federal Policy for the Protection of Human Subjects (also called the “Common Rule”). Among other requirements, the Common Rule mandates that researchers protect the privacy of subjects and maintain confidentiality of human subject data. A human subject is defined by federal regulations as a "living individual about whom an...
  • Records that contain information directly related to a student and that are maintained by the University of Michigan or by a person acting for the university. The Family Educational Rights and Privacy Act (FERPA) governs release of, and access to, student education records. Directory information about a student is not regulated by FERPA and can be released by the university without the student's...
  • Personal financial information held by financial institutions and higher education organizations as related to student loan and financial aid applications. Gramm Leach Bliley Act (GLBA) provisions govern this data type.