https://library.educause.edu/topics/policy-and-law/gramm-leach-bliley-act-glb-acten{303EC605-46F9-45B1-95C2-49CEEC0E879D}https://library.educause.edu/resources/2024/9/2024-educause-horizon-report-cybersecurity-and-privacy-editionThe 2024 EDUCAUSE Horizon Report profiles key trends and emerging technologies and practices shaping the future of cybersecurity and privacy, and envisions a number of scenarios and implications for that future.Tue, 24 Sep 2024 16:46:52 Z{34D5E221-DC5E-4A18-9A04-FDAAA57753F9}https://library.educause.edu/resources/2020/1/educause-policy-videos-proposed-safeguards-rule-changesThe EDUCAUSE Policy Team produced a pair of brief videos to help EDUCAUSE members understand the Safeguards rule and how it might change as well as to explain the pending revisions to campus colleagues. Thu, 16 Jan 2020 20:37:28 Z{F07119DE-A18D-46ED-B723-B3C5A62179B0}https://library.educause.edu/resources/2019/8/educause-comments-proposed-ftc-safeguards-rule-changesOn August 2, 2019, EDUCAUSE joined the American Council on Education (ACE) and several other higher education presidential and professional associations in submitting comments on changes proposed by the Federal Trade Commission (FTC) to its Safeguards Rule.Tue, 06 Aug 2019 20:37:56 Z{CF16CCB3-A1CA-460E-A75C-973ED6262453}https://library.educause.edu/resources/2018/10/why-cybersecurity-matters-and-what-registrars-enrollment-managers-and-higher-education-should-doThe purpose of this white paper, jointly written by the National Student Clearinghouse, EDUCAUSE and REN-ISAC, is to build upon registrars’, enrollment managers’, IT’s and higher education’s day-to-day, nationwide dialog around cybersecurity and vulnerabilities.Fri, 28 Sep 2018 21:00:13 Z{4A9DBBB4-771B-4E52-923E-9E45A91A7099}https://library.educause.edu/resources/2017/4/educause-comments-federal-student-aids-safeguards-rule-audit-requirementOn March 29, 2017, EDUCAUSE joined the National Association of College and University Business Officers (NACUBO), the Council on Governmental Relations (COGR), and the National Association of Student Financial Aid Administrators (NASFAA) in asking the federal Office of Management and Budget (OMB) to delay and/or rewrite a “federal single audit” requirement proposed by the Federal Student Aid (FSA) division of the U.S. Department of Education. Mon, 03 Apr 2017 19:56:40 Z{9FC37957-E2ED-4F54-92E6-9D069E9EAD44}https://library.educause.edu/resources/2016/11/educause-comments-glba-safeguards-ruleEDUCAUSE and the National Association of College and University Business Officers (NACUBO) jointly responded to a request for comments from the Federal Trade Commission (FTC) about its review and potential updating of the Safeguards Rule established under the Gramm-Leach-Bliley Act (GLBA).Thu, 17 Nov 2016 22:35:16 Z{533D687B-D038-4832-9535-2ABDC4B09673}https://library.educause.edu/resources/2010/3/compliance-matrix-poster-for-it-compliance-professionalsThis matrix poster developed by Symantec outlines IT Controls for security and privacy concerns related to regulatory compliance in the workplace.Tue, 22 Dec 2015 17:24:51 Z{B4DFDB3C-24CB-4C17-968E-D0A254F1358D}https://library.educause.edu/resources/2010/1/information-security-and-data-breach-notification-safeguardsThe 2010 report describes information security and data breach notification requirements included in the Privacy Act, the Federal Information Security Management Act (FISMA), Office of Management and Budget (OMB) Guidance, the Veterans Affairs Information Security Act, the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act, the Gramm-Leach-Bliley Act (GLBA), the Fede ...Tue, 22 Dec 2015 17:25:19 Z{0676147D-46B4-4D61-8BDD-10DC1AE8F5E1}https://library.educause.edu/resources/2009/11/privacy-and-confidentiality-holding-it-service-providers-accountable This ECAR research bulletin addresses the data privacy issues that must be covered by contractual language when entering into an agreement for externally provided IT services or for external consulting about institutional systems.Tue, 22 Dec 2015 17:21:54 Z{316B348E-5BAF-4DD6-AD88-55664EECA02A}https://library.educause.edu/resources/2005/5/glba-at-two-what-it-is-whos-doing-what-and-compliance-on-the-cheapTue, 22 Dec 2015 17:06:04 Z{CCD05D3E-B973-4619-8753-FB5F10705429}https://library.educause.edu/resources/2005/1/guin-v-brazos-higher-ed-service-corp-inc"Plaintiff Stacy Guin alleges that Defendant Brazos Higher Education Service Corporation, Inc. ("Brazos") negligently allowed an employee to keep unencrypted nonpublic customer data on a laptop computer that was stolen from the employee's home during a burglary on September 24, 2004."Tue, 22 Dec 2015 17:06:19 Z{9248DC28-EC5C-49CD-BF6D-9BB071731EE4}https://library.educause.edu/resources/2004/1/it-legislation-how-it-impacts-higher-education-and-why-you-should-careTue, 22 Dec 2015 17:02:31 Z{77F5ECB5-8CC7-43F6-8CEB-2937E687D69E}https://library.educause.edu/resources/2004/1/effective-security-practicesTue, 22 Dec 2015 17:01:44 Z{8570D0BC-C279-4236-8E3F-74A225FFECA7}https://library.educause.edu/resources/2004/1/moving-away-from-social-security-numbersTue, 22 Dec 2015 17:02:54 Z{B45D70C9-3733-4C84-A1BF-1FD6B0B59A43}https://library.educause.edu/resources/2004/1/information-privacy-public-policy-and-institutional-policiesTue, 22 Dec 2015 17:02:22 Z{06C4E01F-D1CD-4773-A6D3-4C29BA781884}https://library.educause.edu/resources/2003/1/nacubo-bulletin-model-plans-for-compliance-with-ftc-rules-neededTue, 22 Dec 2015 16:59:30 Z{B12586A8-22FC-405B-A5A4-19B6417F83CD}https://library.educause.edu/resources/2003/1/nacubo-bulletin-clarification-on-applicability-of-ftc-safeguarding-rulesTue, 22 Dec 2015 16:59:30 Z