Information Protection and Security

Each year we issue a reminder regarding the need to protect personal confidential information to which we have been granted access in order to fulfill the requirements of our job functions.  The protection of this information, also known as “Non-Public Personal Information” (NPPI), is mandated by federal and state law, as well as Rutgers policy (e.g., Rutgers Policy 50.3.9,

Dear Colleagues,

Each year we issue a reminder regarding the need to protect personal
confidential information to which we have been granted access in order
to fulfill the requirements of our job functions. The protection of
this information, also known as "Non-Public Personal Information"
(NPPI), is mandated by federal and state law, as well as Rutgers policy
(e.g., Rutgers Policy 50.3.9, http://policies.rutgers.edu).

All units and staff members that create, store, or transmit such
information are required to do so in a manner which protects NPPI.

It’s the NPPI we have to worry about. 

Computerworld - Personally identifiable information on about 68,000 members of CalOptima, a Medicaid managed care plan serving Orange County, Calif., may have been compromised after several CDs containing the information went missing earlier this month.

Confidential information (NPPI) should never be stored on mobile equipment.  This includes credit card numbers, passwords, bank numbers (etc.), and the personal information of other people. The information, itself, is usually more valuable than the equipment it’s stored on. Loss, theft, or negligence in the care of private information could lead to legal problems if the information is breached or compromised, especially if you’re handling the information for the university or a corporate entity.  If it’s necessary to transport NPPI on portable equipment, make sure it’s encrypted, and protect it like your wallet.  Stop. Think. Secure IT!

NASA networks contain security weaknesses that open up highly sensitive personal and scientific data to hackers, possibly affecting space missions, federal auditors said.
Article link

Records of more than 70 million military personnel may be at risk after loss of unerased hard drive, report says.

Protecting sensitive data means locating and enumerating the information in your databases -- and finding the right method to secure it.
Article link

Non-public Personal Information is any data or information considered to be personal in nature and not subject to public availability.

Memo outlines assistance and provides links in the prevention and detection of identity theft.