Examples of Sensitive Data by U-M Role

• The Role at U-M column provides links to information about sensitive data types or elements typically associated with specific roles or populations at the university, as well as to guidance about data-protection responsibilities.
• The Sensitive Data Types column contains links to information about, and lists of common data elements associated with, each data type.

Role at U-M	Sensitive Data Types Associated with Role
Customer	Credit Card or Payment Card Industry (PCI) Information Personally Identifiable Information (PII) Protected Health Information (HIPAA) Sensitive Identifiable Human Subject Research Social Security Numbers
Faculty	Attorney/Client Privileged Export Controlled Research (ITAR or EAR) Federal Information Security Management Act (FISMA) Data Other University Sensitive Data Personally Identifiable Information (PII) Protected Health Information (HIPAA) Sensitive Identifiable Human Subject Research Student Education Records (FERPA)
Patient	Credit Card or Payment Card Industry (PCI) Information Personally Identifiable Information (PII) Protected Health Information (HIPAA) Sensitive Identifiable Human Subject Research
Researcher	Attorney/Client Privileged Export Controlled Research (ITAR or EAR) Federal Information Security Management Act (FISMA) Data Other University Sensitive Data Personally Identifiable Information (PII) Protected Health Information (HIPAA) Sensitive Identifiable Human Subject Research Social Security Numbers Student Education Records (FERPA)
Staff	Attorney/Client Privileged Credit Card or Payment Card Industry (PCI) Information Export Controlled Research (ITAR or EAR) Federal Information Security Management Act (FISMA) Data IT Security Information Other University Sensitive Data Personally Identifiable Information (PII) Protected Health Information (HIPAA) Sensitive Identifiable Human Subject Research Social Security Numbers Student Education Records (FERPA) Student Loan Application Information (GLBA)
Student	Export Controlled Research (ITAR or EAR) Other University Sensitive Data Personally Identifiable Information (PII) Sensitive Identifiable Human Subject Research Student Education Records (FERPA) Student Loan Application Information (GLBA)
Donor	Credit Card or Payment Card Industry (PCI) Information Personally Identifiable Information (PII) Social Security Numbers