Lync Security Considerations

All messages are archived for legal compliance.


Exchanges of student confidential information become part of the educational record for current and prospective students. Lync can be used for discussion of student data considered part of FERPA if certain safeguards are implemented.


Lync is NOT approved for discussion of HIPAA information. Any discussion of protected health information via Lync is currently prohibited. HIPAA defines protected health information (PHI) as any information, whether oral or recorded, in any form that is created or received by a health care provider, health plan, employer, insurer, school or university, health care clearinghouse or a business associate; and relates to the past, present or future, physical or mental health or condition, provision of health care, or health care payment of an individual.

Sensitive Information

Lync is NOT approved for discussion of sensitive and confidential information, such as Social Security numbers, credit card information, personnel information, etc.

Recorded Meetings

If using the record feature, all participants must be aware they are being recorded. Media Release forms should be in place and guidelines followed as appropriate.
Do NOT record human subjects or patients using Lync.

Recordings Storage

Recordings must be the same regulatory and security requirements as other sensitive data (don't record patient treatment or research on human subjects using Lync 2010). Recordings should be kept on ECU Piratedrive as it now offers 40GBs of data storage and ensures the security of recordings.

Desktop Sharing

If you share your desktop, during an online meeting or for remote support, for example, participants have full control of your computer, including all of your computer's data, control panel and other features. Be extremely cautious with the use of this feature. You have the option at any time to end the session. Those persons allowed remote access must meet information security and regulatory compliance requirements. If the person you are allowing remote access is not authorized to access ECU information via other methods, do not provide it via Lync.
Those persons with whom you share your desktop can also capture displayed information from your desktop or a shared document. Please monitor screen sharing sessions and safeguard access to your desktop.
Do NOT store sensitive data on desktops that will be shared with others.

Instructional Use

For instructional conferencing such as with a class, Saba Meeting is the recommended learning tool.

back to the top