XClose

Information Security

Home
Menu

What should I do before transferring sensitive or personal data

1. Ask yourself why? And could this data be sent without the sensitive or personal details?

2. If you still need to send the personal data use one of the following options:

a. E-mail: Encrypt the file using as explained below. Contact the recipient to tell them the password – DO NOT INCLUDE THE PASSWORD IN THE EMAIL WITH THE FILE!

b. Create a shared folder on the S: Drive where you can save the file and grant the recipient access to the folder, and notify them when the file is ready for collection.

c. If this is going to be regular task, create a SharePoint site https://www.ucl.ac.uk/isd/services/communicate-collaborate/sharepoint-and-onedrive-for-business. Restrict access to folders to the recipient only. Upload your file to the folder and notify the recipient that the file is ready for collection.

d. Upload the file to UCL Onedrive. Share the link to the file with the recipient.

For external UCL transfers

1. Where ever possible use a secure web interface to transfer the data

2. You may upload the file to UCL OneDrive and share the link with the external recipient. You should encrypt the file and share the password separately 

3. If you have no other alternative, then encrypt the file using 7Zip and e-mail the file. DO NOT INCLUDE THE PASSWORD IN THE FILE TRANSFER. Contact the recipient and provide them with the password.