UCSF IT Technology

Standard has been moved to the UCSF IT Security Intranet Site.

Effective Date: October 1, 20061. PurposeThis document provides an overview of computer incident response and investigations procedures at the University of California, San Francisco (UCSF), as mandated in UCSF Policy 650-16 Addendum C: Incident Investigation.

Access Without Consent to Electronic Communications RecordsA. AuthorizationAn electronic communication holder's records may be inspected, monitored, or disclosed without the consent of the individual but with the approval of the authorizing Vice Chancellor (see Appendix A, Definitions) under the following conditions:

Stop the most common method of information theftMany information security breaches do not occur through the Internet but because the device containing information is misplaced, lost or stolen.

What you need to knowDigital Millennium Copyright Act (DMCA)UCSF complies with the provisions of the Digital Millennium Copyright Act (DMCA). If you have a concern regarding the use of copyrighted material on any site on the UCSF network, please contact the agent designated to respond to reports alleging copyright infringement.Designated agentThe current designated agent for the UCSF campus to receive notification of claimed infringement under Title II of the DMCA is on file with the U.S. Copyright Office.

What you need to knowThe following recommendations apply to all mobile devices, including both personally and UCSF-owned mobile devices, used for UCSF business.Mobile devices include, but are not limited to:

The UC Electronic Communications Policy, Section IV, Privacy and Confidentiality, governs access to electronic communications records.  In most circumstances, it is better to obtain the consent from the record holder before accessing records.  However, consent is not required in every circumstance (See UCSF Implementation of the ECP - Access without Consent).

UCSF_Data_Classification_Standard_08-09-19 (PDF)Document Owner: Patrick PhelanDepartment Contact: UCSF IT SecurityIssue Date: 4/24/17Effective Date: 4/24/17Reviewed/Revised Date: 8/9/19

Compliance with the peer-to-peer (P2P) provisions of the Higher Education Opportunity Act (HEOA)  I.    Introduction II.    Technology-based deterrents            A. Traffic monitoring            B. DMCA notice response

OverviewUse of any 3rd-party email service by UCSF faculty, staff and learners is not approved by UCSF. This is due to: