5.1

n
US Drivers License Number
n
US Social Security Number
Connecticut SB-650
Connecticut SB-650 is a state data privacy law which protects personally identifiable information. Connecticut
SB-650 was signed into law June 8, 2005 and became effective January 1, 2006. The law applies to any person,
business or agency that conducts business in Connecticut and owns or licenses unencrypted computerized
data that includes personally identifiable information.
The regulation looks for at least one match to personally identifiable information, as defined through the
following content blades:
n
Admittance and Discharge Dates
n
Birth and Death Certificates
n
Credit Card Numbers
n
Credit Card Track Data
n
Group Insurance Numbers
n
Health Plan Beneficiary Numbers
n
Healthcare Dictionaries
n
Medical History
n
Patient Identification Numbers
n
US Drivers License Numbers
n
US National Provider Identifiers
n
US Social Security Numbers
Credit Card Numbers
Custom Account Numbers
If you have organizational account numbers that need to be protected, then customize the content blade
assigned to the Custom Account Numbers regulation with the number pattern via a regular expression.
EU Debit Card Numbers
The policy looks for debit card numbers as issued by the major debit card carriers in the European Union such
as Maestro, Visa and Laser.
FERPA (Family Educational Rights and Privacy Act)
FERPA protects the privacy of student records at educational institutions receiving U.S. Department of
Education funds. It requires the educational institution to have written permission from a parent or student
in order to release information from a student’s educational record.
Under certain circumstances the release of information such as name, address, telephone number, honors and
awards, and dates of attendance may be released or published without permission. Information that can
connect an individual with grades or disciplinary actions requires permission.
The policy must match both of the following content blades for a document to trigger as a violation:
n
Student Identification Numbers
vShield Administration Guide
186 VMware, Inc.