RESEARCH STUDIES, PLEASE NOTE:

Requests to collect SSNs in relation to research studies are now processed by the IRB.

See OHRE SSN Policy & Forms

Form to Request Approval of SSN Collection

Disclosure Statements Required for Collecting SSNs

     (to include on University-generated forms where SSNs are collected)

IRB SSN Policy and related forms:

    under "Consent" - IRB forms to collect SSNs for payment or as an identifier

                (for collection of SSNs in research studies)

Statement of Contractor (Vendor) Compliance

     (to be completed by third parties that require collection of SSNs)

University Committee on the Protection of Personal Data Roster

What should Departments do? Resources for Departments in Response to Security Breaches of Information

What should Individuals do?  Resources for Individuals Regarding Security Breaches of Information

North Carolina Attorney General's Office "No Scam" page:  http://www.noscamnc.gov/

University Committee on the Protection of Personal Data Roster - updated June 26, 2009

2008 Report to the NC General Assembly

2007 Report to the NC General Assembly

DDD Memo re July 1, 2007 Act Amendments

July 1, 2007

2006 Report to the NC General Assembly

Protocol for Responding to Security Breaches of Certain Identifying Information:

http://www.unc.edu/campus/policies/breach_protocol.html

October 1, 2006

Responses Received from Departments to SSN Survey

September 1, 2006

DDD Memo re Implementation of ID Theft Protection Act

May 1, 2006

2005 Report to the NC General Assembly

DDD Memo re SSNs and SSN Survey Form

November 28, 2005

Payment Card Industry Data Security Standard:

http://www.unc.edu/finance/controller/fc/pcd_manual.pdf

January, 2005

Guidelines on Use of the SSN by the University:

http://www.northcarolina.edu/content.php/legal/policymanual/uncpolicymanual_1300_5g.htm

December, 2004

Information Security Policy and Standards:

http://www.unc.edu/hipaa/policies/Information_Security.pdf

June, 2003

"Minimum Necessary" Policy (PHI):

http://www.unc.edu/hipaa/policies/Minimum_Necessary.pdf

April, 2003

Memo from Elson Floyd re PID

October, 1997

HB 454 Amendment effective December 1, 2007

HB1248 Amending ID Theft Protection Act and NCGS 75-65 Protection from Security Breaches

October, 2006

State Controller Memo re ID Theft Protection Act

February, 2006

NC Identity Theft Protection Act

September, 2005

State Privacy Act

October, 2001

Federal Privacy Act

1974