
Don't store personal files in OneDrive.Don't sync files to a machine or device that is not issued and secured by the university.Password-protect your workstation or device and use idle-time screen saver passwords where possible.Keep your operating system and software up-to-date.Do not log into your workstation or device as an administrator (unless absolutely necessary).Ensure virus/malware detection software is installed with the latest definitions.Secure the workstation or device you are using to access OneDrive. Read more about Securing Personal Information before storing that data in OneDrive. Again, check with the data owner or local department policy before moving confidential data to OneDrive for Business. Although that is in place, it is up to you to ensure you are abiding by HIPAA standards when using the service. The University of California system has an agreement in place with Microsoft that OneDrive for Business complies with FERPA, and HIPAA guidelines. Trade secrets or information that may be purchased for the creation of a patent.Data covered by the Health Insurance Portability and Accountability ACT (HIPAA).Data covered by the Federal Educational Rights and Privacy Act (FERPA).Examples of confidential data include but are not limited to:

Confidential data includes data which, if accessed by unauthorized entities could cause personal or institutional financial loss or constitute a violation of statute, act or law.
