BU OneDrive is approved to store Confidential and Restricted Use information. Important information below.
- The BU version of OneDrive has been approved to store Confidential and Restricted Use information owned or used by Boston University, including FERPA and HIPAA. For definitions of Confidential and Restricted Use information, consult the Data Classification Policy.
- Important:
- only the BU version of OneDrive is approved, not the consumer version of OneDrive.
- To properly protect sensitive information, you must understand OneDrive security and set it up correctly. Continue reading to learn how.
- OneDrive allows you to automatically sync your files across multiple devices. This means that sensitive data could inadvertently end up on an insecure device. If you are going to put Restricted Use data on OneDrive, we strongly recommend that you do not sync it to any personal devices. Any device you sync Restricted Use data to must be encrypted, have endpoint protection, require a password, and meet the other Minimum Security Standards.
Manage who can view or edit your OneDrive files
By default, only you can access the files in your OneDrive. When you share files, be careful to avoid accidentally giving people inappropriate access to sensitive information. To do this:
- Go to OneDrive and sign in to your account.
- Right-click the folder or files you want to share, and click Share.
- Important: if you are sharing a folder you are also sharing any sub folder in that directory. Consider limiting sharing capabilities to folders that contain only information you intend to let others view.
- Enter the names of the people you want to share with and a message, if you want.
- (Optional) Click the drop-down list to change the type of link. The Details pane opens, where you can change who can access the link and whether people can edit the item you’re sharing.
Options for Who would you like this link to work for:- Anyone gives access to anyone who receives this link, whether they receive it directly from you or forwarded from someone else. This may include people outside of your organization.
- People in Boston University gives everyone with a BU login name access to the link, whether they receive it directly from you or forwarded from someone else.
- Specific people gives access only to the people you specify, although other people may already have access. If people forward the sharing invitation, only people who already have access to the item will be able to use the link.
By default, Can edit is turned on. If you want people to only view your files, change setting to Can view or Can review (can only suggest changes). Note that Block download feature can only be turned on when Can view is selected.
When you’re done, click Apply.
- When you’re ready to send the link, click Send.
Manage OneDrive File Syncing
If you decide to sync OneDrive across multiple devices, be sure the security on the devices that your information is synced with meets the Minimum Security Standards. Syncing across multiple devices inherently creates the potential for unintended data leakage; syncing Confidential or Restricted Use data is therefore strongly discouraged. Always take caution when transmitting sensitive information.
By default, OneDrive is set up to sync all files and folders but you have the ability to customize what is synced.
