Law / United States / 
Florida
University of Central Florida regulation on protection and disclosure of sensitive information by employees and affiliates
Univ. of Cent. Fla. Reg. UCF-3.045
In force since .
A sensitive categories rule binding public and private bodies.
- Obligation class
- Governance, Prohibition
- Audit expectation
- none
What it requires
- If you are granted access to the University of Central Florida's confidential information to perform services for the university, access, use and disclose documents and files containing sensitive information, including personally identifiable student or parent information, financial information and health information, only with explicit authorization and only on a need-to-know basis for your service (UCF Regulation UCF-3.045(2)(a) and (3)(a)).
- Do not divulge sensitive information acquired during your service to the university to anyone outside the university without authorization, or to anyone within the university without a need to know (UCF Regulation UCF-3.045(3)(c)).
- Use available physical, technological and administrative safeguards to protect the security of sensitive information in any form or medium, and dispose of documents and files containing it so that the information is no longer recognizable or retrievable (UCF Regulation UCF-3.045(3)(d) and (e)).
- When your service ends, or on the request of an appropriate supervisor, return originals and copies of information containing sensitive information to the university and end all further access to and use of it (UCF Regulation UCF-3.045(3)(f)).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
Regulation UCF-3.045 requires no log, no record of disclosures and no audit.
- Kind
- None
- As of
What this law does
A University of Central Florida regulation governs sensitive information acquired by the university's employees, student workers and affiliates in the course of their employment or service. An affiliate is an individual or entity not directly employed by the university that is granted access to confidential information to perform services for the university. Sensitive information includes personally identifiable student or parent information, financial information and health information.
Documents and files containing sensitive information may be accessed, used and disclosed only with explicit authorization and only on a need-to-know basis, and sensitive information may not be divulged outside the university without authorization. Affiliates must use available physical, technological and administrative safeguards to protect sensitive information, dispose of it so that it is no longer recognizable or retrievable, and return it and end all access to it when their service ends.
A unit may require its affiliates to sign a confidentiality agreement that does not conflict with the regulation. The regulation took effect .
When LexLint raises it
When your app profile says your app serves colleges and universities.
Back to the example · Lint your app
Page updated .