Restricted Data Life Cycle

Data stewards will be responsible for the data life cycle of restricted data stored in UBbox. 

Data stewards will ensure:

  • Data that is no longer needed is removed.
    • HIPAA requires Protected Health Information (PHI) to be retained for six years plus 180 days after the creation or last effective date, whichever is later.
  • USDA & UHDA accounts that are no longer needed are deleted. Accounts should not be deleted until data in the sensitive data folders owned by the accounts is no longer needed.

To ensure unneeded restricted data in UBbox is removed, UBIT will query data stewards about their restricted data folders annually.  Unneeded data will be removed and unneeded accounts will be deactivated.