Confidential and Sensitive Information includes, but is not limited to, the following identifiers whether contained in hard copy or electronic format.

An account is a body of information, or a record, or an individual, group, or entity that is kept for the purpose of transacting on an on-going basis with another individual, group, or entity. The terms “accounts” and “records” are used interchangeably because they share similar functions and characteristics. Both contain identifiable information on an individual,

group, or entity. They each allow for access to products or services, and keep a history of transaction activity.

Both new and existing accounts where a continuing relationship exists between the University and an individual, group, or entity are considered “covered accounts.” There are two definitions.

1.

An account that the University offers or maintains, primarily for personal, family, or household purposes, that involve or is designated to permit multiple payments or transactions. Examples include a credit card account, tuition and fee payment, bookstore purchases, and/or other financial transactions of matriculated and non-matriculated students and of employees.

2.	Any other account that the University offers or maintains for which there is a reasonably foreseeable risk to customers or to the safety of the financial institution or creditor from identity theft, including financial, operational, compliance, reputation or mitigation risks.

Electronic or Soft Copy Format refers to any Confidential and Sensitive Information that exists electronically on CDs, DVDs, phones, computers, networks, portable devices, etc.

Hard Copy Format refers to any Confidential and Sensitive Information that exists physically on paper.

A physical access zone is a clearly defined physical or implied boundary established to control and limit access to CSI areas.

Red Flags are patterns, practices, or specific activities involving covered accounts that indicate the possible risk of identity theft.

.

A service provider is any individual, group, or entity that directly provides a service to the University or on behalf of the University for its customers or clients.

Spoken Word refers to the transfer of Confidential and Sensitive Information verbally or audibly through electronic media.