© 2009 President and Fellows of Harvard College.
Access to lists and databases of HUIDs should be restricted to persons who have specific need of such access for performance of their jobs.
Access to all ID numbers should be managed with reasonable care.
Access to bulk lists of HUIDs and associated names should be restricted to those with a business need to minimize the chance that such a list could be compromised.
Links:
[1] http://www.security.harvard.edu/resources/advisories/huid-usage-guidelines