Objectives

The following are the objectives of the Information Security Program for the Gramm-Leach-Bliley Act; Health Insurance Portability and Accountability Act of 1996; Family Education and Privacy Act of 1974; and Identity Theft Red Flags Act of 2003:

• Ensure the security and confidentiality of customer information in compliance with applicable GLBA rules as published by the Federal Trade Commission.
• Provide administrative, physical and technical safeguards to ensure compliance with the HIPAA Security Rule.
• Implement a Red Flag program that is designed to detect identity theft in day-to-day university operations.
• Ensure the privacy and confidentiality of student information in compliance with Federal law, including both technical and administrative safeguards.
• Safeguard against anticipated threats to the security or integrity of protected electronic data.
• Guard against unauthorized access to or use of protected data that could result in harm or inconvenience to any customer.

Last revised: February 2019