Confidentiality of Information and Research Data

All information and data stewards and custodians will abide by ethical, legal, and professional responsibility rules in the maintenance and appropriate use of institutional information and research data.

Institutional Information and Data Stewards

Scope: Stewards have the highest level of responsibility for administering the privacy, security, and regulatory compliance of data sets under their purview (e.g., education records, human resources, financial data). Authority/Responsibility: Information and data stewards authorize access and deactivation of individual custodians with a business need to access, manage, or manipulate institutional information and research data. Stewards must provide training in the proper handling and management of institutional information and research data for custodians under their authority.

Institutional Information and Data Custodians

Scope: Custodians are any individuals (employees, volunteers, etc.) who access, manage, or manipulate institutional information or research data. Authority/Responsibility: Custodians must follow campus policy and stewardship rules for handling of institutional information and research data.

This policy requires adherence to ethical, legal, and professional standards, including, but not limited to:

Institutional need-only access, management, and manipulation of institutional information and research data (i.e., no "administrative voyeurism"). Disclosure of institutional information and research data in compliance with law, campus policy, and stewardship rules. The obligation not to facilitate the violation of administrative policies or the circumvention of technical or physical safeguards by others.