Data Disposal Day 10-26-22

October 18, 2022 | News & Announcements

Date: Wednesday, October 26, 2022

Time: 8:00 AM- 12:00 PM

Location: Parking Lot 12A near the Natural Sciences buildings

Properly disposing of e-waste is an important component of cybersecurity. Improper disposal, donation, or recycling of e-waste may inadvertently disclose sensitive information, which could be exploited by cyber criminals. Each of us is responsible for the security of information assets with which we work. 

Much like e-waste, keeping paper records with sensitive information that no longer need to be maintained under the UC Records Retention Schedule is both a security and privacy risk. Good document hygiene includes shredding unnecessary paper and deleting e-records with sensitive information that is consistent with the UC University Records Management Program (BFB-RMP-1) and the UC Records Retention Schedule.

Southern California Shredding will be on campus to shred both paper and e-waste products on October 26.

Acceptable items to bring for disposal (both working and non-working):

  • Paper Records (staples, paper clips, rubber bands, binder clips and folders with metal prongs don’t need to be removed)
  • Hard drives (where possible, please remove hard drives from devices before bringing them to be shredded)
  • Laptops/Servers 
  • Cell phones
  • Mini tablets
  • SSDs
  • Flash Drives
  • SD Cards
  • Lab Equipment
  • Monitors
  • Office Equipment
  • Small Electronics

 
***Note: Backup tapes, VHS tapes and cassette tapes will not be accepted this year for shredding.***

Drop Off

You can drop off any items that your unit has determined should be destroyed. The truck will shred your paper records and e-waste onsite. Certificate of destruction will be available upon request. Any items not applicable for on-site shredding will be disposed of in an appropriate manner, in accordance with UCI and Southern California Shredding privacy policies.

Before you shred:

  1. Identify the records you have and whether they are still in use.
  2. Check the UC Records Retention Schedule.
  3. Determine whether the records can be destroyed.
    • If the retention period has lapsed and no one uses the records, destroy or delete the records. Shred sensitive, confidential, or restricted paper records.
    • If the retention period has lapsed but the records are part of a foreseeable or ongoing litigation, an investigation, an ongoing audit, or a pending Public Records Act request, KEEP the records. Do NOT destroy them.
    • If your unit/department has been notified by Risk Management or counsel to retain the records, do NOT destroy them.
  4. Verify with your supervisor that it is acceptable to destroy the records.

Examples of sensitive, confidential, or restricted information include:

  • Personally Identifiable Information (PII)
  • Protected health information (PHI) protected by HIPAA
  • Credit card data regulated by the Payment Card Industry (PCI)
  • Passwords providing access to restricted data or resources
  • Court-ordered settlement agreements requiring non-disclosure
  • Information specifically identified by contract as restricted
  • Other information which, if accessed or disclosed without authorization, may result in adverse effects.
  • Sensitive research information
  • Other P3 or P4 data

Questions about classifying records or data elements can be directed to security@uci.edu.  

Data Stored on Electronic Devices

Peter’s Exchange staff will be on-site to review each e-waste item and determine if it can be safely and securely salvaged for resale, or if it should be destroyed.

Thank you for helping to clear out unneeded documents and reduce privacy risks at UC. This free event is brought to you by the UCI Office of Information Technology, UCI Records Management, UCI Privacy, UCI Procurement Service, and UCI Libraries Special Collections & Archives.

Alerts

Critical MacOS and iOS Patches 04/2023

Apple has released critical patches for iPhones, iPads, and Macs to address zero-day flaws being actively exploited that can result in complete device compromise and data breach. Details of the vulnerabilities are tracked as CVE-2023-28206 and CVE-2023-28205. Please...

Critical Microsoft Outlook Vulnerability 03/2023

There is a critical Microsoft Outlook vulnerability for Windows (CVE-2023-23397) that allows hackers to remotely steal hashed passwords by simply receiving an email, and is actively being exploited. Please ensure system and application updates are initiated and...

News & Announcements

Cybersecurity Awareness Month 2023

October is Cybersecurity Awareness Month! The month was originally created through a collaboration with the National Cyber Security Alliance and the Department of Homeland Security. Feel free to check out the events and resources listed below. Events Data Disposal Day...

New UCI Information Security Website

As Cybersecurity Awareness Month 2022 comes to a close, we have launched a completely redesigned version of the UCI Information Security website at https://security.uci.edu What’s new on the redesigned website? Completely new look and feel with current UCI branding...