Purdue University

What do I need to do before I access my REED Folder?

• Anyone with access to data in scope of HIPAA must complete the required HIPAA training annually. A PI is responsible to ensure the training is completed annually.
• Ensure you are using Purdue Login via the Duo client.
• For limited data sets, a Data Security Plan and Data Use Agreement will be required. This process should be started by Sponsored Program Services.
• Ensure you understand the following policies and procedures specific to HIPAA.
• If you are working with the IRB, ensure the process is completed prior to requesting access to REED Folder.

Does Purdue have a Business Associate Agreement with Box?

Box supports the HIPAA and HITECH regulations, as well as the ability to sign HIPAA Business Associate Agreements (BAAs) with customers. Customers who are required by law to comply with HIPAA, such as HIPAA Covered Entities and HIPAA Business Associates, must have an Enterprise or Elite account with Box and sign a HIPAA Business Associate Agreement (BAA).

• Purdue University signed a Business Associate Agreement with Box, and Box accounts are Enterprise.
• Box provides the ability to use O365 online office application to open and work with content. Purdue University has signed a Business Associate Agreement with Microsoft.
• All other third-party service providers with our instance of Box Enterprise are not covered by a Business Associate Agreement (BAA).

Do not use third party party applications to process data considered Restricted via your Purdue managed Box account. Purdue University does not maintain a contractual agreement with the vendor, and the required security controls are not in place.

A Box Managed account is your Purdue managed Box account. A REED folder is a project folder created in secure folder structure within Box.

Who should I contact for an IT incident?

• The incident should be reported as soon as it is discovered. Submit an incident request to abuse@purdue.edu
• If you lost a device, your account can be logged out using a Box admin feature. Submit an incident request to abuse@purdue.edu

What is a Box Managed Account and REED Folder?

A Box Managed account is your Purdue managed Box account. A REED folder is a project folder created in secure folder structured within Box.