Improving instructional design and course effectiveness
Fulfilling institutional reporting and accreditation requirements
Conducting educational research (with appropriate approvals)
Ensuring compliance with federal and state regulations
The University adheres to data minimization principles by collecting only the information necessary and relevant for specific educational purposes. Unnecessary data is not collected, and information is retained only as long as required by institutional policy or legal mandate.
Disclosure of Student Information:
FERPA permits disclosure of education records without student consent in the following circumstances:
School Officials with Legitimate Educational Interest: Faculty and staff who need access to perform their institutional responsibilities
Other Schools: To institutions where the student seeks to enroll or is enrolled
Authorized Representatives: For audit or evaluation purposes related to federal or state educational programs
Financial Aid Determinations: In connection with student applications for financial assistance
Accrediting Organizations: To carry out accreditation functions
Compliance with Judicial Orders: In response to lawfully issued subpoenas or court orders
Health and Safety Emergencies: To protect the health or safety of students or others
State and Local Authorities: Within the juvenile justice system, pursuant to specific state law All other disclosures of personally identifiable information require written consent from the student, specifying:
The records to be disclosed
The purpose of the disclosure
The party or class of parties to whom disclosure may be made
The student's signature and date
The University's Registrar Office maintains records of all disclosures of personally identifiable information (except disclosures to school officials and directory information), including the date, parties to whom disclosed, and legitimate interest for disclosure.
Data Breach Response:
A data breach is any unauthorized access, acquisition, use, or disclosure of student education records or personally identifiable information that compromises the security, confidentiality, or integrity of those records or information.
In the event of a suspected or confirmed data breach:
Immediate Containment: Affected systems are isolated to prevent further compromise
Investigation: IT Security conducts forensic analysis to determine scope and cause
Notification to Leadership: Privacy Officer and senior administration are immediately informed