Law / United States /
Ohio
Bowling Green State University, sensitive data privacy
In force since .
A sensitive categories rule binding government bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Security
What it requires
- This binds Bowling Green State University and its stakeholders; it names no vendor.
- If you hold Bowling Green State University information, do not store, communicate, transport or process it on personally owned media, devices or computers without prior written approval from the appropriate vice president and approval of the equipment by information technology services (rule 3341-6-39(B)).
- If you hold Bowling Green State University information on a university-owned portable device, store the device in a physically secure location and encrypt the data with university-approved software before you transport it (rule 3341-6-39(B)).
- If you are a Bowling Green State University stakeholder, report any loss of sensitive data, disclosure of it to unauthorized individuals or suspected misuse of it immediately to the office of the chief information officer (rule 3341-6-39(B)).
These lines are LexLint's reading of the law's text.
What this law does
Rule 3341-6-39 of the Ohio Administrative Code, the sensitive data privacy policy of Bowling Green State University, counts among sensitive information social security numbers, driver license numbers, financial account numbers, university ID numbers, protected health information and educational records.
University stakeholders may not store, communicate, transport or process university information on personally owned media, devices or computers without prior written approval from the appropriate vice president and approval of the equipment by information technology services. Information on university-owned portable devices must be stored in physically secure locations and may not be transported without encrypting it using university-approved software and techniques.
Any loss of sensitive data, disclosure of it to unauthorized individuals or suspected misuse of it must be reported immediately to the office of the chief information officer. The rule took effect . Section 3345.011 of the Revised Code defines a state university as a public institution of higher education that is a body politic and corporate, and recognizes Bowling Green State University as a state university.
When LexLint raises it
When your app profile says your app serves colleges and universities.
Back to the example · Lint your app
Page updated .