As required by Hawaii State law HRS 487N-7 (https://www.capitol.hawaii.gov/hrscurrent/Vol11_Ch0476-0490/HRS0487N/HRS_0487N-0007.htm), an annual report on the existence and character of each personal information system added or eliminated since the previous report must be submitted. A "personal information system" is defined as a manual or automated recordkeeping process that contains personal information and the name, personal number, or other identifying particulars of a data subject.
"Personal information" is defined as an identifier in combination with one of more specific data elements.
Identifiers are a common piece of information related specifically to an individual and includes any of the following:
- A first name or initial, and last name;
- A user name for an online account;
- A mobile phone number; or
- An email address specific to the individual
If you collect personally identifiable UH Sensitive or Regulated data (See institutional data classification levels: https://datagov.intranet.hawaii.edu/institutional-data-classification-levels/) in either electronic or paper-based form on students, the general public (Non-UH), or UH Employees, you must complete a personal information survey for each repository of data.
A completion guide is available at https://go.hawaii.edu/yxF.
To begin, click on My Surveys.
For More Information
University of Hawai‘i Information Security
infosec@hawaii.edu
http://www.hawaii.edu/infosec