...
- 42 U.S.C. 405 - Evidence, Procedure, and Certification for Payments
- Rowan University Committee for the Protection of Human Subjects Institutional Review Board (IRB) Guidelines for Biomedical and Behavioral Research Involving Human Subjects May 26, 2015
- Rowan University Policy - Acceptable Use
- Rowan University Policy - Information Classification
- Rowan University Policy - Transmission of Sensitive Information
- The New Jersey "Identify Theft Prevention Act" C.56:11-45 "g" and "h"
VI. POLICY
- Rowan University does not permit the use of a SSN as an identifier or match research data sets for any person or entity in any system, except where the SSN is required or permitted by law. The intent of this policy is to protect the personal information of research participants/subjects and provide guidance on the proper handling of Social Security Number (SSN) and Personally Identifying Information maintained by or on behalf of Rowan University.
- Coded tissue samples/data sent to collaborators and data received from collaborators or tissue banks should not be labeled with names, birth dates, or medical record number or SSN.
- Research participants are not required to provide their SSN except to receive payment as required by Rowan University Accounting Office.
- Rowan University Finance Division, Accounts Payable office is required by the Internal Revenue Service (IRS) to obtain a W-9, which may include the SSN or Tax Identification Number (TIN), in order to file various 1099 forms with the IRS. Payments in excess of $600 made to research participants/subjects through Accounts Payable are reported annually to the IRS on Form 1099-MISC, Miscellaneous Income. In order to pay research participants/subjects from ClinCard, Accounts Payable requires the following documentation:
- Gift Card Recipient Log
- Gift Card Payment Acknowledgment Form
- IRS Form W-9 – Request for Taxpayer Identification Number and Certification
- When there is use of SSN for payment purposes, all records containing SSN should be stored in a secure place which may include locked file rooms, desks or cabinets or stored in network drives with access limited to those individuals or entities that require access to perform a legitimate university job function.
- SSN will be released to entities outside the institution only where permitted or required by law or with the expressed written permission from the individual or where approved by the Office of General Counsel.
- Individuals permitted access to SSN will be instructed on the appropriate handling and protection of this data by their management or designated representative.
- Subject to applicable document retention policies or unless required by law, when no longer required, paper documents and electronic media containing SSNs must be destroyed or disposed of using methods designed to prevent subsequent use or recovery of information.
- Individuals permitted access to personal identifying information (PII) must safeguard the information and destroy the information.
- In addition to this policy, Rowan University researchers, faculty, students and staff are required to adhere to:
- Rowan University's "Acceptable Use Policy" No: ISO:2013:06;
- Rowan University's "Information Classification Policy": Information Security Policy No:ISO:2013:07; and,
- Rowan University’s “Transmission of Sensitive Information Policy”: Information Security Policy No. ISO:2013:05.
- The State of New Jersey “Identity Theft Prevention Act” requires reporting identity theft to local law enforcement agency.
- Rowan University’s “Gift Card Policy”: Finance Policy No: FIN:2020:01
- If there is reason to believe that Identify theft or loss has occurred, the responsible custodian of PII must immediately report the incidence to the Office of Privacy and Compliance.
- The Institutional Review Board has the ultimate authority on how PII could be used for research purposes.
- Any exception to the policy should be submitted to the Office of General Counsel.
...