As required by Hawaii State law HRS 487N-7 (https://www.capitol.hawaii.gov/hrscurrent/Vol11_Ch0476-0490/HRS0487N/HRS_0487N-0007.htm), any repository of personal information (paper-based or electronic) that contains Personally Identifiable Information (PII), must be reported. A repository of PII is defined as a manual or automated recordkeeping process that contains personal information and the name, personal number, or other identifying particulars of a data subject.

PII is defined as an identifier in combination with any of the following:

  1. Social Security Number
  2. Driver's license number or Hawaiʻi Identification card number
  3. Account number, credit or debit card number, access code, or password that would permit access to an individual's financial account.

Identifiers are a common piece of information related specifically to an individual and includes any of the following:

  1. A first name or initial, and last name;
  2. A user name for an online account;
  3. A mobile phone number; or
  4. An email address specific to the individual

PII is Institutional Data categorized as Regulated (High Risk). Please visit the Data Governance site for further information on Institutional Data types - https://datagov.intranet.hawaii.edu/institutional-data-classification-levels

A completion guide is available at https://go.hawaii.edu/yxF.

To begin, click on My Surveys.



For More Information

University of Hawai‘i Information Security
infosec@hawaii.edu
http://www.hawaii.edu/infosec