Calendar A-Z Index School of Arts and Sciences University of Pennsylvania

I Have PII, What Now?

Printer-friendly versionPrinter-friendly version

The first thing you need to do is decide whether the sensitive data that you have is something that you need to keep or whether it should be destroyed to prevent it from falling into the wrong hands.

If you're not sure whether or not you need to keep the sensitive data in your office, then you should ask for help. Your LSP may be able to advise you. Also, the university records office has a guide to its Records Retention Schedule that you can consult to figure out which materials need to be preserved, and for how long. Note that even if you have material that needs to be preserved for an extended period of time, it is not necessarily the case that it is your office that needs to archive it. Some records are archived centrally, such as grades.

If you decide you need to get rid of some sensitive data, see Eliminating PII. If you determine that you need to retain your data, but ensure that it is stored securely, see the options listed under the "Solutions" tab at the top of this page.