Skip to main content

Secondary navigation:

Information Technology Services

Regulated University Data Chart

information technology services

How to interpret the Regulated Data Chart

use permitted Use Permitted - No technical, policy, or contractual issues exist that prohibit use of this data type with this service. You may send, store or share the regulated data type with this service if your data steward and your department/unit policies permit you to do so.
use restricted Use Restricted - Use of this service with the regulated data type is restricted and approval is required. Follow the instructions provided for this service by looking at the Use Restricted key at the bottom of this page.
use prohibited Use Prohibited - Use of this service with the regulated data type is prohibited. Do not use this service to send, store or share the regulated data type.
   
 

FERPA
Educational
Records

GLBA
Student Loans

Employee Pay
& Benefits

HIPAA
Health Records

Personal Identifiers* Massachusetts 201 CMR 17

BC Email

use prohibited

use prohibited

use restricted (1)

use prohibited

use restricted (2)

use prohibited

use prohibited

use restricted (1)

BC Gmail for Students

use prohibited

use prohibited

use prohibited

use prohibited

use restricted (2)

use prohibited

use prohibited

use prohibited

3rd Party Email (e.g. Gmail, Hotmail, etc.)

use prohibited

use prohibited

use prohibited

use prohibited

use restricted (2)

use prohibited

use prohibited

use restricted (1)

MyFiles@bc

use permitted

use permitted

use permitted

use restricted (3)

use restricted (2)

use prohibited

use prohibited

use permitted

Departmental File Shares**

use permitted

use permitted

use permitted

use restricted (3)

use restricted (2)

use prohibited

use restricted (4)

use permitted

BC ITS Managed Servers

use permitted

use permitted

use permitted

use restricted (3)

use restricted (2)

use permitted

use restricted (4)

use permitted

BC provided laptop, desktop or smartphone

use permitted

use prohibited

use permitted

use prohibited

use restricted (2)

use prohibited

use prohibited

use permitted

Personally owned laptop, desktop or smartphone

use permitted

use prohibited

use prohibited

use prohibited

use restricted (2)

use prohibited

use prohibited

use permitted

Connected Backup (formerly Iron Mountain)

use permitted

use permitted

use permitted

use prohibited

use restricted (2)

use prohibited

use restricted (4)

use permitted

Unencrypted flash / thumb drive

use prohibited

use prohibited

use prohibited

use prohibited

use prohibited

use prohibited

use prohibited

use permitted

Encrypted flash / thumb drive

use permitted

use permitted

use permitted

use restricted (3)

use restricted (2)

use permitted

use restricted (4)

use permitted

Collaboration Tools

BC Confluence / Wiki

use permitted

use prohibited

use prohibited

use prohibited

use prohibited

use prohibited

use prohibited

use prohibited

Cloud Storage Services (e.g. Evernote, Dropbox,
Google Drive, iCloud, SkYDrive)

use prohibited

use prohibited

use prohibited

use prohibited

use restricted (2)

use prohibited

use prohibited

use permitted

Survey sites***

use prohibited

use prohibited

use prohibited

use prohibited

use restricted (2)

use prohibited

use prohibited

use prohibited

Learning Management

WebCT/Blackboard

use permitted

use prohibited

use prohibited

use prohibited

use restricted (2)

use prohibited

use prohibited

use prohibited

BC Google Apps

use permitted

use prohibited

use prohibited

use prohibited

use restricted (2)

use prohibited

use prohibited

use prohibited

Other Administrative Tools

HP IT Service Center (ticket management)

use prohibited

use prohibited

use prohibited

use prohibited

use prohibited

use prohibited

use prohibited

use prohibited

Wireless Networks

use restricted (5)

use restricted (5)

use restricted (5)

use restricted (3)

use restricted (2)

use restricted (5)

use restricted (4)

use restricted (5)

^ Because 201 CMR requires stored file encryption

* Personal Identifiers - As defined by Massachusetts 201 CMR 17, protected personal identifiers include (a) Social Security Number, (b) driver's license number or state-issued identification card number, or (c) financial account number, or credit or debit card number.

** Departmental File Shares - Hard drive space made available on a remote server typically provided by BC departments or Schools.

*** Survey sites - Online sites for conducting surveys such as SurveyMonkey, Zoomerang, SurveyGizmo and PollData

Use Restricted key:

  1. Take special care not to send to large email lists or to "Reply All' to large email lists.
  2. Any use of human subject research data is subject to the approval of Boston College Institutional Review Board.
  3. Any handling of Protected Health Information must comply with U.S. HIPAA Privacy and Security regulations.
  4. See Payment Card Usage policy at Boston College. (Download Adobe Reader to view PDFs)
  5. Only use a secure wireless network, such as BC's 'bsecure' network.