Skip to main content
University of Nebraska Omaha logo University of Nebraska Omaha
APPLY MY UNO DIRECTORY

APPLY MY UNO DIRECTORY
  • About Backback to Main menu
    • About
    • Leadership
    • Mission and Strategic Plan
    • Accreditation
    • Our City
    • Facts and Figures
    • Campus Safety
    • Buildings and Maps
    • Contact Us
  • Academics Backback to Main menu
    • Academics
    • Majors & Programs
    • Class Search
    • Catalogs
    • Academic Calendar
    • Colleges
    • Academic Affairs
    • Online Learning
    • International
    • Library
  • Admissions Backback to Main menu
    • Admissions
    • Undergraduate Admissions
    • Graduate Admissions
    • Tuition and Fees
    • Financial Aid
    • Registrar
    • Visit UNO
    • Request Info
    • Apply
  • Student Life Backback to Main menu
    • Student Life
    • Division of Student Life and Wellbeing
    • Academic & Career Development Center
    • Accessibility
    • Housing & Residence Life
    • Inclusion
    • Service
    • Student Conduct & Community Standards
    • Student Involvement
    • Student Safety
    • Wellness
  • Engagement Backback to Main menu
    • Engagement
    • Office of Engagement
    • Campus Resources for Community
    • Service Learning Academy
    • Barbara Weitz Community Engagement Center
    • Volunteer and Civic Engagement Programs
    • Samuel Bak Museum: The Learning Center
    • Faculty Resources
    • Student Resources
    • Voter Engagement
    • Community Engagement Partnership Initiative
  • Research Backback to Main menu
    • Research
    • Research News
    • Centers and Institutes
  • Athletics Backback to Main menu
    • Athletics
    • Baxter Arena
    • Omaha Mavericks Website
  • Alumni Backback to Main menu
    • Alumni
    • Transcripts
    • Thompson Center

Campus Policies

  1. UNO
  2. Campus Policies
  3. Retention and Destruction/Disposal of Regulated Information

Retention and Destruction/Disposal of Regulated Information

Policy Contents

  • Scope
  • Policy Statement
  • Reason for Policy
  • Procedures
  • Definitions
  • Forms
  • Related Information
  • History
  • Effective: 01-31-2015
  • Last Revised: 08-31-2016
  • Responsible University Administrator: Chief Information Officer
  • Responsible University Office: Information Security
  • Policy Contact: Information Security • security@unomaha.edu
  • Print or view PDF

Scope

This policy applies to all university personnel and entities that have access to and electronically store regulated data and/or collect, store and use personal information.

Policy Statement

Retention
It is the policy of the University of Nebraska Omaha (UNO) and its affiliated entities to ensure the privacy and security of proprietary and regulated information in the maintenance, retention, and eventual destruction/disposal of such media. All destruction/disposal of regulated information media will be performed in accordance with federal and state law and pursuant to the UNO Record Retention Schedule. Records that have satisfied the period of retention will be destroyed or disposed in an appropriate manner.

The retention schedule for destruction or disposal shall be suspended for records involved in any open investigation, audit, or litigation. Individuals who know or suspect that confidentiality has been breached by another person or persons have a responsibility to report the breach to the respective supervisor or administrator or to the Human Resources Department. Employees must not confront the individual under suspicion or initiate investigations on their own since such actions could compromise any ensuing investigation. All individuals are to cooperate fully with those performing an investigation pursuant to this policy.

Disposal/Destruction
Department administration shall determine what information entrusted to their department is private and/or confidential (regulated) and shall communicate methods of protecting that information through the destruction/disposal process to appropriate persons associated with their department.

All paper waste that may contain regulated data must be shredded. Environmental Services (EVS) is responsible for the security, transport, and storage of confidential paper waste from internal customer locations. EVS will secure the confidential waste in locked containers provided by the UNO Recycling Center. The UNO Recycling Center will be responsible for disposing the recycled material in a secure manner and ensuring that all documentation necessary for demonstrating compliance with regulations is maintained. Failure to appropriately dispose or destroy regulated information may result in sanctions, civil or criminal prosecution and penalties, scholastic or employment corrective action which could lead to dismissal, or, as it relates to healthcare professionals or others outside of UNO, suspension or revocation of all access privileges.

All electronic media that contains regulated data must be recycled through the Mailroom or the Information Security Office. The Information Security Office maintains records of destruction for the period outlined in the UNO Record Retention Schedule.

Reason for Policy

Retention and subsequent destruction/disposal of proprietary and Protected Health Information (PHI) are governed by federal and state regulations and university policies and procedures. These regulations and guidelines include, but may not be limited to:

  • Health Insurance Portability and Accountability Act of 1996 (HIPAA)
  • NU Executive Memorandum 27, HIPAA Compliance Policy
  • Board of Regents Bylaws
  • Board of Regents Policies
  • Information Security Policy
  • Institutional Review Board Guidelines, Retention of Research Records for Non-Exempt Research
  • Information Technology Services Procedures
  • NU Record Retention Schedule

Procedures

This policy is enforced by the Executive Regulated Data Authorization Committee. Failure to comply with this policy may result in disciplinary actions.

Definitions

Information: Data presented in readily comprehensible form. (Whether a specific message is informative or not depends in part on the subjective perceptions of the person who receives it.) Information may be stored or transmitted via electronic media, on paper or other tangible media, or be known by individuals or groups. Information generated in the course of university operations is a valuable asset of the university and belongs to the university.

Proprietary Information: Information regarding business practices, including but not limited to, financial statements, contracts, business plans, research data, employee records and student records:

  • Employee records refers to all information, records and documents pertaining to any person who is an applicant or nominee for any university personnel position described in the Board of Regents Bylaws §3.1, regardless of whether any such person is ever actually employed by the university, and all information, records and documents pertaining to any person employed by the university.

  • Student education records means any information recorded in any way which directly relates to a student and is maintained by or on behalf of UNO (education agency/institution). 

Student education record does not include a (i) sole possession record, (ii) law enforcement record, (iii) employee record of a person other than a student who is employed by UNO by virtue of his or her status as a student at UNO, (iv) alumni record and (v) medical record that is part of the common medical record shared by UNO, The Nebraska Medical Center, UMA and UDA. (NOTE: The HIPAA privacy regulation does not apply to education records covered by FERPA.)

Protected Health Information (PHI): Individually-identifiable health information. Health information means any information, whether oral or recorded in any medium, that:

  • Is created or received by UNO; and

  • Relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual.Records containing PHI, in any form, are the property of UNO. The PHI contained in the record is the property of the individual who is the subject of the record.

Cardholder Data: Full magnetic stripe or the Primary Account Number (PAN) plus any of the following:

  • Cardholder name

  • Expiration date

  • Service code (CVV or equivalent)

Cardholder Data Environment: Area of the computer system network that possesses cardholder data or sensitive authentication data and those systems and segments that directly attach or support cardholder processing, storage, or transmission. Adequate network segmentation, which isolates systems that store, process, or transmit cardholder data from those that do not, may reduce the scope of the cardholder data environment and thus the scope of the PCI assessment.

Forms

Regulated Data Authorization Form

Related Information

NU Executive Memorandum 16

NU Executive Memorandum 26

NU Executive Memorandum 27

UNO Student Records Policy

State of Nebraska Consumer Notification of Data Security Breach Act of 2006

Payment Card Industry Data Security Standards (PCI-DSS)

UNO Regulated Data Security Policy

NU Record Retention Schedule

 

History

This policy is an update to the Retention and Destruction/Disposal of Private and Confidential Information Policy that was previously updated in 2015.

  • Next Steps
  • Visit UNO
  • Request Information
  • Apply for Admission
  • The UNO Advantage
  • Our City (Omaha)
  • Just For You
  • Future Students
  • Current Students
  • Work at UNO
  • Faculty and Staff
  • A-Z List
  • Popular Services and Resources
  • my.unomaha.edu
  • Academic Calendar
  • Campus Buildings & Maps
  • Library
  • Pay Your Bill
  • Course Catalogs
  • Internships & Career Development
  • Bookstore
  • MavCARD Services
  • Military-Connected Resource Center
  • Speech Center
  • Writing Center
  • Human Resources
  • Center for Faculty Excellence
  • Affiliates
  • University of Nebraska System
  • NU Foundation
  • Buffett Early Childhood Institute
  • Daugherty Water for Food Institute
  • National Strategic Research Institute
  • Peter Kiewit Institute
  • Rural Prosperity Nebraska
  1. University Policies
  2. Privacy Statement
  3. Accessibility
  1. 402.554.2800

University of Nebraska Omaha
University of Nebraska Omaha, 6001 Dodge Street, Omaha, NE, 68182
  • © 2023  
  • Emergency Information Alert
  • MavsReport

Omaha Skyline

Our Campus. Otherwise Known as Omaha.

The University of Nebraska does not discriminate based on race, color, ethnicity, national origin, sex, pregnancy, sexual orientation, gender identity, religion, disability, age, genetic information, veteran status, marital status, and/or political affiliation in its education programs or activities, including admissions and employment. The University prohibits any form of retaliation taken against anyone for reporting discrimination, harassment, or retaliation for otherwise engaging in protected activity. Read the full statement.

scroll to top of page