Sensitive Data Discovery

A service overview and catalog of Sensitive Data Discovery provided by the UC Berkeley IT Service Hub.

Description

The Sensitive Data Discovery service provides departments with the tools to proactively identify and secure high-risk personal information. Using Spirion (formerly Identity Finder), campus units can scan local drives, emails, and cloud storage to locate sensitive data—such as Social Security and credit card numbers—ensuring compliance with UC’s strict data protection standards.

Benefits & Features

Deep Scanning: Search for protected data across workstations and servers.
Compliance Support: Specifically designed to help units managing UC P3 and P4 data meet institutional security obligations.
Incident Response: Available to verify data exposure following a security incident.

Getting Started

We offer two licensing options to match your department’s scale and technical needs:

Feature	Single Device License	Departmental License
Best For	Individuals or specific machines.	Entire departments or complex environments.
Allocation	Per individual device.	Based on total departmental FTE.
Scope	Local drives & OCR (images).	Local drives, file shares, and databases.

To Request Service:

Email security-scanning@berkeley.edu to request licenses. Please include your preferred licensing type and the number of licenses (or departmental FTE count) required.
Review KB0015626 - Guidance for Departments Scanning for SSNs Stored on Servers and Workstations.

Privacy Notice: The University protects the privacy of Electronic Communication Records. Ensure you have proper permissions before scanning any system.

Service Details

Eligibility	This service is available to Campus IT staff.
Contact	Technical Support: For troubleshooting or reporting a service interruption, please submit a support ticket or contact the Service Desk at 510-664-9000. Request the Service: Email security-scanning@berkeley.edu for license requests or policy questions.
Availability	Always-On: Available 24/7. Support is provided Monday–Friday, 8:00 AM – 5:00 PM PT, excluding University holidays and curtailment periods.
Cost	There are no direct costs associated with this service at this time.
Data Classification	This service is rated for P2 (Protection), A1 (Availability), and R1 (Recovery) data. Compliance: Users are responsible for ensuring data handled within this service complies with the Data and IT Resource Classification Standards.