Teaching Policies

Research data management

"According to the VCU/VCUHS Joint Information Management and Security Framework, Google Drive can be used to store most data. In some cases, you will need to set up your folders according to the instructions in the next section to keep your data secure. Controlling and monitoring your sharing access is key to the proper use of campus Google Drive for data storage.

Data that can be stored in Google Drive: First name, init/Last name, FERPA directory information, Employee/Personnel Records, University Financial Records, Contracts/Grants info, Information under NDA, Investigative/Court Information, Protected Research/Intellectual Information, Information belonging to federal government with sensitivity rating of low (FISMA low), copyrighted protected information

Data that can be stored in Google Drive with proper sharing and access control: SSN, FERPA Non-directory information, Driver’s License or State Issued ID, Criminal Justice Information, Financial Aid Information, Donor information, PII of Children Under 13, PPRA regulated information, PII of EU Citizens, Authentication (Log-in) Credentials (if encrypted)

Data that needs assessment/approval and proper sharing and access control: Medical/Mental History, Medical Treatment or Diagnoses Information, Health Insurance Policy numbers, HIPAA PHI (ACE/from Covered Entities), Identifiable genetic information

Data that can not be stored in Google Drive: Credit/Debit Card info, dbGaP data, The Cancer Genome Atlas (TCGA) data, Information belonging to federal government with sensitivity rating of moderate or high (FISMA, Moderate+High), Export Controlled Information"

Student information

The following "directory information" can be disclosed from student records without the student's consent:

See the footnote that specifically mentions email addresses: