Policies & Guidance

Privacy Policy

• Privacy Policy, General

Data Protection and Privacy

• Clinic Policies and Procedures Regarding Privacy
• Controlled Unclassified Information Policy
• Data Classification Handling Policy & Procedure
• Data Protection Privacy Notice
• Electronic Data Disposal Policy & Procedure
• Gramm-Leach-Biley Student Financial Information Security Program
• Identity Theft Prevention Program
• Investigative Contact by Law Enforcement
• Privacy Policy: Counseling & Psychological Services
• Record Confidentiality
• Student Records Policy
• Student Record Policy Primary Records Custodians
• KU Libraries: Privacy and Confidentiality

Access Control and Authentication

• Information Access Control Policy
• Information Technology Security Policy
• Learning Management Systems (LMS) Policy
• Multi-Factor Authentication
• Password Policy

Information Security

• Security Procedure: Risk and Vulnerability Assessment
• Systems Development Life Cycle (SDLC) Policy
• Systems Development Life Cycle (SDLC) Standard

Records Management

• Records Retention Schedule

IT Governance

• Roles and Responsibilities for Information Management Policy

External Resources

• Cybersecurity | Title IV Program Eligibility
• EDUCAUSE | Data Privacy
• HIPAA Privacy Rule
• International Association of Privacy Professionals (IAPP)
• Office for Human Research Protections
• Protecting Student Privacy