Skip to main content

Compliance & Safety


Research involving restricted data, i.e. data that is governed by laws, regulation, or contractual agreements, requires special precautions. UF operates a pre-approved environment that meets CUI requirements called ResVault. It is approved for many types of restricted data, e.g., Controlled Unclassified Information (CUI), patient health information (PHI), student data (FERPA), intellectual property (IP), export control (ITAR/EAR). Formerly known as SBU, LES, and FOUO. Regulated by NIST Special Publication 800-171

  • Retain your email for three fiscal years per UF’s records retention schedule
  • Declare outside activities for consulting and other business/professional activities
  • Conduct all UF business through the UF email service and hosting websites on the ufl.edu name space
  • Encryptall mobile devices, using firewall and antivirus software and take other reasonable measures to secure your data from cyberattacks
  • Separate your business and personal online accounts, e.g., Amazon
  • Register for insurance with the International Center and request to take decaled equipment (e.g., laptops) with Asset Management before you travel abroad
  • Proactively ensure that your labs operate as safely as possible, including verifying that your group (inc. you) is caught up with training
  • Be cognizant of rules for research involving human subjects, animals, select agents, autonomous systems (drones), or export controlled technology
  • Follow privacy rules upholding the rights of students (e.g., FERPA) and patients (e.g., HIPAA)
  • Notify HR that you intend to bring visitors to campus so they may be pre-screened before making accommodations
  • Register volunteers (including minors) that support your programs

EH&S safety resources