Page Comparison

Laws and Regulations

FERPA: Federal Family Educational Rights and Privacy Act of 1974

• Registrar: http://www.reg.uci.edu/privacy/ 
• UNEX: http://unex.uci.edu/services/legal/ferpa/ 
• EEE: https://eee.uci.edu/help/policy/ferpa/
• Sec. 720-12: Student and Student Applicant Records - Guidelines

HIPAA: The Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules

• UC HIPAA Compliance

Payment Card Industry (PCI): PCI SSC Data Security Standards Overview

Gramm-Leach-Blilely: UCOP Gramm-Leach-Bliley (GLB) Act Compliance

Privacy Policies and Guildines

The University of California offers unparalleled information privacy protections to students, faculty, and staff. OIT Campus service providers must take a broad view of their privacy and confidentiality responsibilities, such as minimizing invasion into private lives. The University recognizes that principles of academic freedom and shared governance, freedom of speech, and privacy hold important implications for the use of electronic communications.

Administrators, programmers, etc. may not examine or disclose electronic communications records, or their content, without the holder’s consent. Proper approval must be obtained to access electronic communication records without user consent. University policy requires that its employees take necessary precautions to protect the confidentiality of personal information encountered either in the performance of their duties or otherwise.

See: UCI Privacy Policies

Information Security Policies and Guidelines

The University of California is committed to high standards of excellence for protection of information assets and information technology resources that support the University enterprise.

University of California

• IS-2: Inventory, Classification, and Release of University Electronic Information
• IS-3: Electronic Information Security
• IS-11: Identity and Access Management
• IS-12: Continuity Planning and Disaster Recovery
• Electronic Communications Policy

UC Irvine

• 800-13: UCInet Guidelines
• 800-15: UCI Guidelines for the UC Electronic Communications Policy
• 800-16: World Wide Web Policy
• 800-17: UCI Implementation Guidelines for Notification in Instances of Security Breaches Involving Personal Information Data
• 800-18: Security Guidelines for Computers and Devices Connected to UCInet