The ITS whole disk encryption service is designed to provide an additional layer of security for your data. It is highly recommended for those who must store sensitive data on laptops or desktops. Data encryption software essentially "locks down" your hard drive, making it the data accessible only to you and those you authorize. The disk encryption, in conjunction with logon and screen saver passwords, protects Yale University data if the computer is lost or stolen. It does not protect data once the user boots the encrypted device.

Not everyone who has sensitive data should install desktop encryption software. Identify records with confidential numeric data by scanning with data scanning software. The first step is knowing what data you have, and what levels of protection are required to keep the data safe.

Guidelines for handling confidential information:

1. Delete
   Securely delete the files you do not need and that you do not have a legal obligation to preserve.
   
2. De-identify
   De-identify Protected Health Information (PHI) covered by HIPAA (Health Insurance Portability and Accountability Act): If you do not need any of the 18 identifiers specified in the HIPAA Privacy Rule, your records/data can be 'de-identified' and will no longer constitute PHI. See Yale University HIPAA policy 5039 De-Identification Checklist [PDF].
3. Encrypt
   If you believe that you must retain files with the confidential information in place, you must obtain permission to do so from your supervisor. Examples of information include Social Security numbers, credit card numbers, trade secrets, protected health information, disciplinary records, grades for assignments and courses, salary records, and tax records. Get explicit approval from your supervisor before considering any data encryption procedure.