Spirion: Frequently Asked Questions
Last Updated: December 15, 2017 1:15:46 PM PST
Give feedback
Expand section
What is Spirion?
Spirion is software licensed by UC San Diego to facilitate the discovery and remediation of sensitive data across UC San Diego-owned systems and networks.
The software searches for Social Security and credit card numbers contained within files, folders and email clients. The scans are automated but can be manually run. For the automated scans, once you receive the scan report, you are requested to review the potential matches and remediate them appropriately.
Why is this important?
Discovering and remediating sensitive data is important for the prevention of data breaches, for compliance with state and federal laws and to meet user responsibilities defined by University of California and UC San Diego policies.
Only UC San Diego systems specifically approved and authorized for the storage of sensitive data are allowed to do so. This process ensures that UC San Diego systems do not unnecessarily contain sensitive data related to UC San Diego employees, families, vendors, students or other affiliates.
Do all computers need to have Spirion installed?
The majority of business systems at UC San Diego do need to have Spirion installed and configured to run regularly.
Who can view my scan results?
Results are sent to a secure console maintained by IT Security after Spirion is closed. Designated personnel from IT Security can see certain data elements from the scan. Entire files are never sent to the console from your computer. Only limited information about the match found and action taken can be viewed from the secure console.
Are UC San Diego student ID numbers considered personally identifiable information?
Student ID numbers will not be flagged by Spirion. Nevertheless, they are sensitive and could be used to obtain information about a student, such as education records. Treat student ID numbers as confidential information.
I have a business need for storing SSNs. What should I do?
UC San Diego has a formal process to evaluate requests for local storage of SSNs designed to ensure that systems that need to regularly process SSNs are secure. To obtain authorization, email IT Security.
Can I keep my or my family's PII on my UC San Diego computer?
UC San Diego-owned systems should not contain PII for any individual. You or your family’s personal information may be lost as a result of a breach on your University computer.
Can I install Spirion at home?
Spirion is only licensed for use on systems owned by UC San Diego.