The campus data management policy defines who can authorize access to different sets of information.  Since the organization of the campus changes frequently, the list of who is responsible for managing and granting access to the sets of data is maintained separately and can be accessed here [1].

The Data Owners List [1] contains the current matrix of record types, data managers, and access grantors for protected information stored on campus systems. In line with the current draft Data Management policy (available on request), this document will be updated as and when assigned roles change.

Questions about the Data Owners List and the Data Management policy should be addressed to iso-staff@humboldt.edu [2].

Special Requirements for Accessing Level 1 Data

The law requires that HSU and its employees, consultants, and independent contractors maintain the confidentiality, security, and integrity of all personally identifiable information (PII) stored and/or used by anyone associated with the University. We use two tools to comply with these requirements:

1. Spirion [3]is installed on every office computer and can help you identify and locate Level 1 data on your system. Spirion must be run at least once a year.
2. All users with access to Level 1 data are now required to use dual-factor authentication. The CSU provides a license to DUO to enable us to implement this. See our DUO page for more information. [4]