The following are the objectives of the Information Security Program for the Gramm-Leach-Bliley Act; Health Insurance Portability and Accountability Act of 1996; Family Education and Privacy Act of 1974; and Identity Theft Red Flags Act of 2003:
- Ensure the security and confidentiality of customer information in compliance with applicable GLBA rules as published by the Federal Trade Commission.
- Provide administrative, physical and technical safeguards to ensure compliance with the HIPAA Security Rule.
- Implement a Red Flag program that is designed to detect identity theft in day-to-day university operations.
- Ensure the privacy and confidentiality of student information in compliance with Federal law, including both technical and administrative safeguards.
- Safeguard against anticipated threats to the security or integrity of protected electronic data.
- Guard against unauthorized access to or use of protected data that could result in harm or inconvenience to any customer.
Last revised: February 2019