Best Practices

The University’s legal services department asks all faculty and staff to ensure that their confidential information is kept secure. This is especially pertinent when working from home or in a remote location as we all have a responsibility to protect sensitive information.

This includes, but is not limited to, the use of  strong passwords pursuant to the University’s Digital Password Management Policy, and other security protocols and policies and features recommended by Information Technology Services to protect records from unauthorized individuals, including family and friends.

Lock records in secure locations when not in use, e.g. locked cabinet and when accessing records remotely and only use authorized, secured University networks. Use strong passwords to protect your electronic devices, laptops, and portable device and ensure that your computer is up-to-date and has appropriate anti-virus tools installed.

Data minimization

Employees should refrain from taking confidential information off-campus, including information about identifiable individuals, student records, grades, human resource records, non-public financial information, unless required. Take as few records as you can for expected work. If possible, take copies of records, instead of originals. While in transit, carry confidential records or electronic storage devices containing confidential records in a locked satchel or case. Do not leave records or devices unattended, e.g. at restaurants, washrooms, public transit, or in the back seats of cars.

IT Services provides information and support about Cybersecurity awareness, safe browsing and device security and mandatory Cybersecurity training with details at this webpage.

In the event of any unauthorized disclosure of confidential information or potential breach, contact the Department of Legal Services at Richard.Taylor@uwindsor.ca as soon as possible to report the disclosure or loss.