Florida State University (FSU) takes seriously its obligation to respect and protect the privacy of the campus community and to safeguard the confidentiality of information important to the university's academic and research missions. The privacy arm of the Information Security and Privacy Office (ISPO) is the unit responsible for preserving and enhancing privacy protections for all students, faculty, staff and alumni.
The privacy program is based on the following:
- The campus unit should maintain an inventory of information assets.
- Information assets are classified as protected, private or public.
- A risk analysis is conducted using the information asset inventory to ensure effective and efficient safeguards are deployed as required by rule, regulation or contractual obligation.
- The campus unit should have an applicable business purpose for information collected, stored or transmitted.
- Information classified as protected or private has access restrictions in place to allow access only as part of an approved job duty or business function.
- The sharing of FSU information assets designated as protected or private should only be done after review and execution of a formal agreement when appropriate.
- Safeguarding controls are monitored and reviewed periodically to ensure they are working as planned.
Make sure you safeguard FSU Information in keeping with community expectations, law and policy. Utilize FSU resources on protecting student privacy under FERPA, health records under HIPAA, Social Security Numbers, and Credit Card Data. FSU requires Campus Units protect protected and private data based on the Information Classification Guidelines. During contract review, please incorporate the Suggested Contractual Provisions for the External Sharing of University Information Classified as Protected of Private. When using cloud services review the Guidelines for the Use of Personal Cloud Computing Services for University Business.
For more information, visit the Finance and Administration website for a list of Florida State's university-wide, privacy-related policies and guidance documents or refer to the privacy resources on this site to review the laws and regulations that govern university records including student, student financial, health, employee, and research.