Restrictions on Where University Data is Allowed to be Stored

As part of UVA’s Device Security Initiative (DSI), and existing policy under IRM-003, Darden IT will be implementing changes to strengthen how University data is protected across our shared network.

Why This Matters

In 2023, one compromised device led to 60,000+ password resets across UVA. Peer institutions have faced even greater impacts, including delayed semesters, major recovery costs, and exposure of sensitive data. About 100,000 devices connect to UVA’s network daily, and recent assessments show vulnerabilities still exist. Protecting the sensitive information entrusted to UVA requires stronger safeguards.

What Is Changing

Only UVA-approved storage platforms may be used to store University data on Darden-managed devices:
  • Microsoft OneDrive (Darden)
  • Darden-managed file servers, SharePoint, and Microsoft Teams
  • UVA-managed Box, file servers, or OneDrive (if you regularly use your UVA account)
Access to unapproved cloud storage services (such as Google Drive, Dropbox, iCloud, and similar platforms) will soon be blocked on Darden-managed devices. https://security.virginia.edu/university-data-protection-standards

What Counts as University Data?

UVA defines data broadly: text, numbers, graphics, images, sound, or video — in any format — created, received, maintained, or transmitted in support of UVA’s teaching, research, healthcare, public service, or administrative operations.
Full policy: IRM-003 – Data Protection of University Information
https://uvapolicy.virginia.edu/policy/IRM-003


What to Expect

In the coming weeks, you may see a warning notification when accessing storage platforms that will be blocked. When the cut-over to actual blocking is going to occcur, we will send out a notification.
  • Starting Monday 04/06/2026 (the warning phase), you may temporarily proceed by clicking “unblock”.
  • Enforcement begins on Monday 05/18/2026, access from Darden-managed devices will no longer be available.
Action Needed

If you currently store University data in an unapproved cloud service from a Darden-managed device, please move it to OneDrive within the next few weeks. Highly sensitive data has additional restrictions. Please review those restrictions here: https://security.virginia.edu/protection-highly-sensitive-data-procedure
If you need assistance determining appropriate storage or migrating files, Darden IT is available to help.
Thank you for your collaboration in strengthening UVA’s security posture.

Was this answer helpful? Yes No

Sorry we couldn't be helpful. Help us improve this article with your feedback.