Search2 Results

This procedure describes the criteria to be used in determining who is eligible to access student records data, the circumstances under which data may be released, and procedures to follow in requesting access to student data. This policy is designed to comply with the provisions of the Family Educational Rights and Privacy Act (FERPA) of 1974, 20 U.S.C. Sec. 1232g and with the University’s policies for the use of human subjects in research as monitored by the Office of Research Administration.

Protected Health Information (PHI) and Sensitive Information (SI) that is transmitted or received on behalf of the University of North Carolina at Chapel Hill by any Constituent must be encrypted in accordance with this Standard, which details required minimum encryption standards for University Tier 2 and Tier 3 information. Particular transmissions may require a heightened encryption requirement or consideration of additional legal or policy requirements.