Controlled Unclassified Information (CUI) Program Security & Requirements Plan

Social Security numbers are unique, nine-digit numbers issued to U.S. citizens, permanent residents, and temporary (working) residents for taxation, social benefits, and other purposes. Social Security numbers are a primary target for identity thieves. They fall into the U-M category of sensitive Personally Identifiable Information (PII). U-M has not used Social Security numbers as identifiers for students and employees since 2004.

• Past, present, or future physical or mental health or condition of an individual.
• Provision of health care to the individual by a covered entity (for example, hospital or doctor).
• Past, present, or future payment for the provision of health care to the individual.

Researchers should be aware that health and medical information about research subjects may also be regulated by HIPAA. Researchers can contact the Compliance Office with questions.