The world of privacy regulation continues to be in a state of change. Certain information is covered under specific regulations yet, as of this writing, the United States has no overarching federal privacy law. Absent a federal law, states have turned to developing their own privacy regulations which are all slightly different and have varying compliance requirements. Further impacting ̽̽ are new international regulations, both enacted and soon to be enacted. In other words, the privacy regulatory landscape is difficult to navigate.
Due in large part to the diverse operations within higher education, an array of privacy and information security laws impact our work. One goal of our Privacy Program is to design it in such a way that we are not developing different programs for different regulations. Rather, we have designed our Privacy Program to be flexible enough to cover as many of the compliance elements of these various regulations that we can and deal with the “outliers” as the arise. Ultimately, our goal is to treat all private, personally identifiable, and confidential information as if there is a regulatory requirement… because, there most likely is.
Depending on where you work at ̽̽ and what information you have access to, one or more of these regulations may apply to your work.