ALL UAB-owned laptops need to be encrypted with PGP Whole Disk Encryption, even if they will not be used for activities involving PHI. Licenses for PGP have been purchased by the University and are free to the department. Macintosh laptops must have an open firmware password and be encrypted with PGP or Filevault 2 (OSX Lion only).

Whole disk encryption is also required for desktop computers that contain PHI (Protected Health Information) and reside in high traffic areas. Additionally, any computer containing PHI or other confidential data should be encrypted with PGP. When at all possible, PHI should reside on the file server and not on the local computer drive.

Because a lost encryption password will cause your data to be irretrievable, the process of encrypting your hard drive should always involve your IT support staff. (Your IT staff will be able to proxy a "master" key to gain access to your computer in the event that you forget, or are unable, to provide the password).

Your personally-owned laptop should also be encrypted if used for UAB Business, using PGP Desktop (Windows, licenses provided by UAB) or Filevault 2 (OSX Lion, free).

For more information, Department of Medicine & Department of Psychiatry users should contact us at 5-4357 or submit a support request ticket at http://support.dom.uab.edu. Other UAB users should contact their own IT group.