Task Force Appointed to Review Security of Personal Information
July 23, 2013
Dear Faculty and Staff:
Many of you are aware of a recent, inadvertent use of Social Security numbers belonging to approximately 18,700 U.Va. students. The event occurred during the mailing of a brochure containing information about the U.Va. Student Health Insurance Plan provided by Aetna Student Health. We regret that this happened, and I want to assure you that the University is taking immediate steps to mitigate the situation and to prevent a recurrence.
The protection of personal information of students, faculty, and staff is a top priority. The University has worked over the past several years to make sure confidential information and data are as secure as possible, and we remain committed to this effort.
To this end, I have appointed a task force to review the University's current policies and procedures regarding the protection of personal information and related data. Executive Vice President and Chief Operating Officer Pat Hogan will chair the task force, and the Office of General Counsel will serve in an advisory role. Members of the task force include representatives from the offices of Internal Audit, Student Affairs, Compliance, and Enterprise Risk Management. The task force will make sure that appropriate safeguards protecting personal information are in place, and will make recommendations for improvement. It is my expectation the task force will conclude its work as soon as possible.
Protecting personal information and data is in the best interest of everyone in our community. I am grateful for your support of the task force's work.
Teresa A. Sullivan