Data is categorized as restricted or unrestricted, based upon the level of security required for adequately protecting the data. UC Berkeley's "Data Management, Use, and Protection" (DMUP) Policy states that, "campus data must be managed, used, and protected in accordance with federal and state law and University of California and campus policies so as to ensure its integrity, availability, privacy, and confidentiality."

The Restricted Data Management (RDM) system will be used by the campus to inform System and Network Security (SNS) about systems throughout the University that collect or use restricted data.

Phase I: The first report of restricted data registrations will be produced January 31, 2007 to inform the Chancellor of the overall status of campus compliance. All departments and units using restricted data governed by SB 1386, FERPA, or HIPAA must register their data by that time.

For examples of restricted data types, please read each of these brief data lists: SB 1386; HIPAA; FERPA.

If your system is using data restricted by any one of these policies you need to register your system now.

Phase II: A later phase will require departments and units to register all systems that contain or use restricted data as governed by all policies. For information about other restricted data types, please read each of these brief data lists: IPA; Data Proprietor; Federal Restrictions; UCOP.

Host Security Bundle:After you have registered with RDM, SNS can provide you with software and tools that will help you secure machines storing restricted data. The Host Security Bundle includes encryption software, anti-virus/anti-spyware, and host monitoring services. In addition, SNS will provide enhanced vulnerability detection services and rapid IDS alert response to all machines registered in the RDM. For information about the Host Security Bundle offered by SNS, please use contact us page to email SNS.

More Information: If you have any questions regarding specific policies about restricted data, or if you would like a master list of all restricted data elements, please visit Data Stewardship Council.

If you have any questions about RDM please use contact us page.