International Travel
Why is International Travel Different?
U.S. Customs and Border Protection may search and copy the contents of travelers' laptops and expect travelers to divulge credentials and encryption keys as necessary. Americans can expect similar treatment when visiting other countries. Refusal to comply can result in seizure of the device or denial of entry into the host country. Once in the country, risks to confidential, controlled and sensitive data continue. Some countries legally prohibit encryption, and others view all encryption suspiciously. Physical loss and digital espionage also put confidential information (or tools to access it) on your devices at risk.
When traveling abroad, there is no expectation of privacy. Always assume in your destination country, U.S. ports of entry and in transit, eavesdropping may take place on all electronic communications.
What to Do Before Traveling Internationally
- Use a Loaner Device - International travelers should arrange to use loaner devices while traveling abroad. Load only essential data and information that will be needed while traveling and be sure to set password controls.
- Do not travel with confidential or sensitive information even if it is encrypted
- U.S. export control regulations forbid the transport of certain data outside of the country
- See UHS SAM 07.A.08 for data classification.
- Some countries do not allow encrypted devices.
- Do not allow services or applications to store your passwords on the loaner device.
- Do not travel with confidential or sensitive information even if it is encrypted
- No Loaner Device Available? - If loaner devices are not available, take the following steps to prepare your system for international travel:
- Back up all data.
- Remove all information not essential to travel. Do not travel with confidential, sensitive, proprietary, research or export controlled information even if it is encrypted. U.S. export control regulations forbid the transport of certain data outside of the.
- Do not allow services or applications to store your passwords. Remove this option for your current systems, including email and Wi-Fi.
- Update all antivirus, security patches, and firewalls.
- Set up password protection on your devices. Require a password to start and unlock the device.
- Verify DUO Authentication is available in the country you are traveling to - Effective May 5, 2022, Duo will begin blocking authentications from users whose IP address originates in a country or region subject to economic and trade sanctions by the U.S. Office of Foreign Assets Control (OFAC), including Cuba, North Korea, Iran, Sudan, Syria, and regions in Russia and Ukraine. This change in Duo's company policy means that those attempting to authenticate to a Duo-protected application from a device with an IP address originating in an OFAC-regulated country or region will be blocked from completing their login and receive an error message.
- VPN Considerations - Be aware that certain countries may restrict the use of VPN.
- Use a Loaner Device - International travelers should arrange to use loaner devices while traveling abroad. Load only essential data and information that will be needed while traveling and be sure to set password controls.
What to Do While Traveling Internationally
- Keep Devices with You - Do not leave any electronic devices (cell phones, laptops, tablets, etc.) unattended, even in your hotel room or safe. Do not pack electronic devices in your checked bags or ask someone to watch them for you.
- Be Wary of Public Wi-Fi - Wi-Fi hotspots for public use are targets for information theft. While on public Wi-Fi, your device is vulnerable to data miners. You should connect to a Virtual Private Network (VPN) whenever possible or avoid visiting websites that contain confidential information, such as banking websites, to keep your information secure.
- Disconnect When Possible - Turn off Bluetooth, cellular services, and Wi-Fi any time you are not using them.
- Limit Access to Restricted Information - To prevent the interception of information without your knowledge, avoid accessing confidential, sensitive, proprietary, research or export-restricted information from your electronic device. If you must access these items for presentations or collaboration, use a secure VPN connection, unless encryption is prohibited in the host country.
- Loss or Theft - Immediately report loss or theft of electronic devices to the local authorities and either security@uh.edu or your departmental IT staff. Do not wait until your return to report loss or theft. Take the necessary contact information with you and store it separately from your electronic devices.
What Should I Do When Returning from International Travel?
- Return any loaner devices - Remove all data from your loaner devices and return them promptly.
- Change Your Passwords - Change your password on any service, device or application that you accessed while traveling or that shares a password that you used while traveling.
- Sanitize Your Devices - When possible, reinstall the Operating System on any devices you carried on your trip. Otherwise, request that an IT person analyze your device for malware or unauthorized access.