information privacy

Colleges and universities possess an inordinate volume and variety of personal information about students and their families, employees, applicants, alumni, and donors for which they are subject to a broad array of privacy and security laws and regulations.

For example, student records are subject to the Family Educational Rights and Privacy Act (FERPA). Health related activities are subject to regulations under the Health Insurance Portability and Accountability Act (HIPPA). The security of many institutional financial records is subject to the Gramm-Leach Bliley (GLB) Act, and telephone marketing and solicitations are subject to various federal and state do not call laws.

Consequently, ALL university employees--executives, administrators, counselors, faculty, and staff--have both a legal and a moral responsibility to protect the privacy of all internal and external constituents by remaining aware of federal, state, and municipal regulations that pertain to the disclosure of information contained in official institutional records. If this obligation is not taken seriously, information breaches can bring legal liabilities to colleges and universities that can result in substantial financial costs, and just as importantly, in damage to an institution's public reputation.