This how to covers electronic and physical records as well as verbal conversations.

Store and handle confidential information in electronic form according to Requirements associated with their data classification level.

Store and handle physical records containing confidential information according to requirements for Paper and Physical Records at this site.
For staff, view University policy and your responsibility for managing confidential information at the Peoplesoft main page (Quick Links).

In addition to the general requirements, certain types of data have specific handling requirements. 

For University requirements covering paper and physical records, or guidelines on storage and retention of University records, see the General Record Schedule. General Record Schedule