University Committee for the Protection of Personal Data (UCPPD)

UCPPD provides processes and structures for best practices regarding the security and protection of personal data in possession of the University, including:

Review current campus collection and uses of social security numbers and other personal identifying information as defined by the North Carolina Identity Theft Protection Act.
Approving or disapproving such collection and use of personally identifiable information.
Reviewing security measures associated with hard copy forms and electronic templates that contain personally identifiable information.
Documenting the University’s processes for the collection and use of personally identifiable information (including Social Security numbers).
Recommending institutional changes needed for continuing compliance or best practices.
Oversight of activities needed to implement the Red Flags Rule.

See the UCPPD Charter for additional information.

For details on submitting a request for approval, see the UCPPD Review Process document.

Membership

Name	Office	Position
Micki Jernigan, Chair	Information Technology Services	Chief Privacy Officer
Dennis Schmidt	Information Technology Services	Assistant Vice Chancellor and Chief Information Security Officer
Chris Garriss	Internal Audit	Information Systems Auditor
Wendy Andrews	Office of the Executive Vice Chancellor and Provost	Executive Business Manager
Rich Arnold	Office of Human Resources	Senior Director, HR Information Management
David T. Lambeth III	Office of University Counsel	Assistant University Counsel
Christy Samford	Office of University Registrar	Deputy Registrar
Chris Williams, ITEC Rep	Student Affairs	IT Director

Meeting Dates & Deadlines

The UCPPD meets monthly. Requests must be submitted for review at least 10 business days before the meeting in order to be considered for that month’s agenda. See the UCPPD Review Process document for details on submission requirements.

Meeting Date: 3rd Tuesday 3-5 pm (with 30-minute time slots assigned by IPO).
Submission Deadline: 1st Tuesday by 5 pm.
*adjusted for holiday

Month	Submission Deadline	Meeting Date
Jan	1/2/19*	1/15/19
Feb	2/5/19	2/19/19
Mar	3/5/19	3/19/19
Apr	4/2/19	4/16/19
May	5/7/19	5/21/19
June	6/4/19	6/18/19
July	7/2/19	7/16/19
Aug	8/6/19	8/20/19
Sept	9/3/19	9/17/19
Oct	10/1/19	10/15/19
Nov	11/5/19	11/19/19
Dec	11/26/19*	12/10/19*

Additional Resources

UNC GA Memo Red Flag Rules (pdf)

UNC GA Model ID Theft Program (pdf)

NC State Controller Red Flag Rules Advisory Memo

Red Flags Rule (16 C.F.R. Section 681.1)

Appendix A to Part 681—Interagency Guidelines on Identity Theft Detection, Prevention, and Mitigation (Published as an appendix to the Red Flags Rule, provides an outline for developing a program.)

Supplement A to Appendix A (Provides examples of Red Flags – scroll about halfway down page)