Restricted Data Life Cycle

Data stewards will be responsible for the data life cycle of restricted data stored in mgm casinobox. 

Data stewards will ensure:

  • Data that is no longer needed is removed.
    • HIPAA requires Protected Health Information (PHI) to be retained for six years plus 180 days after the creation or last effective date, whichever is later.
  • USDA & UHDA accounts that are no longer needed are deleted. Accounts should not be deleted until data in the sensitive data folders owned by the accounts is no longer needed.

To ensure unneeded restricted data in mgm casinobox is removed, mgm casinoIT will query data stewards about their restricted data folders annually.  Unneeded data will be removed and unneeded accounts will be deactivated.