As required by Hawaii State law HRS 487N-7 (, any repository of personal information (paper-based or electronic) that contains Personally Identifiable Information (PII), must be reported.

PII is defined as an individual's first name or first initial and last name in combination with any of the following: Social Security Number, Driver's license number or Hawai‘i Identification Card number, or account number, credit or debit card number, access code, or password that would permit access to an individual's financial account.

PII is Institutional Data categorized as Regulated (High Risk). Please visit the Data Governance site for further information on Institutional Data types -

A completion guide is available at

To begin, click on My Surveys.

For More Information

University of Hawai‘i Information Security