Abstract
The collection, maintenance, and use of personally identifiable information in networked environments require attention to matters of security and privacy. The goals of security are to preserve the confidentiality, integrity, and availability of information resources. Expectations for privacy are derived from federal or state law and institutional policies. This presentation will explore the emerging public policy framework for safeguarding information resources and legal and ethical considerations for enterprise resource systems.