Emails containing credit card or Social Security numbers sent from external parties to @uab.edu addresses will soon result in a warning about unprotected messages that contain Restricted information.
Users who receive such warnings must notify the external party that the sending of Restricted information to UAB employees or students is prohibited. If such emails are part of a current business process, that process should be re-engineered to eliminate the use of Social Security numbers or credit card information.
UAB IT is already blocking the sending of emails from @uab.edu addresses if the message appears to contain a Social Security number or credit card number. Sending credit card or Social Security numbers via email can make you or others more vulnerable to identity theft — and is against UAB policy.
Social Security numbers and credit card numbers are classified as Restricted/PHI under the Data Classification Rule.
Emails to UAB with credit card or Social Security numbers will generate warning
- January 30, 2018