Download eBook (PDF) - Red Gate Software

1 – Understanding Sensitive Data• First and last name.• Home address.• E-mail address.• Telephone number.• Social Security Number.• Identifiers used in data collection efforts.While the Children's Online Privacy Protection Act is not specific toeducational records, many student activities include children under the age ofthirteen; therefore this regulation often coincides with FERPA.As in many cases when dealing with data that is regulated, strict control ofaccess to data is vital in its protection. Careful consideration as to how this datais disclosed, whether it be on a report or presented on a screen, is an importantrole of the DBA.Employment RecordsThe Human Resources department of any given business contains a myriad ofsensitive information on each of their employees. In this environment, there aremany internal policies and regulations to which one must adhere to protect thisdata from those who seek its disclosure.The United States Department of Health and Human Services' Privacy Rule ofthe Health Insurance Portability and Accountability Act (HIPAA) is anexample of one of the regulations that also applies to employee data. Inaddition to HIPAA, there are many other privacy regulations that affect, anddefine, the sensitivity of employment data. Some are at the federal level, suchas the United State's Federal Privacy Act of 1974, and some at the state level,such as the California Information Practices Act, as well as various internalcorporate policies that are specific to a given business.The following are a few examples of data that is considered sensitive whenconsidering information regarding employees and their jobs:• Salary details and history.• Insurance benefits and beneficiary information.• Direct deposit account information.• Job description details.• Background check results.• Reference validation.• Exit interviews.28