Ethics, Compliance and Audit Services
Privacy policies and references
UC Policies
Academic Manuals
- APM 010: Academic Freedom
- APM 015: Faculty Code of Conduct
- APM 160: Maintenance of, Access to, and Opportunity to Request Amendment of Academic Personnel Records
Business and Finance Bulletins (BFB): Information Systems
- IS-2: Inventory, Classification, and Release of University Electronic Information
- IS-3: Electronic Information Security
- IS-10: Systems Development Standards
- IS-11: Identity and Access Management
Business and Finance Bulletins (BFB): Records Management and Privacy Series
- RMP-2: Records Retention and Disposition: Principles, Processes and Guidelines
- RMP-7: Privacy of and Access to Information Responsibilities
- RMP-8: Legal Requirements on Privacy of and Access to Information Policies
- RMP-9: Guidelines for Access to University Personnel Records by Government Agencies
- RMP-11: Student Applicant Records
- RMP-12: Guidelines for Assuring Privacy of Personal Information in Mailing Lists and Telephone Directories
Business and Finance Bulletins (BFB): Business Affairs
- BUS-43: Materiel Management
- BUS-49: Policy for Cash and Cash Equivalents Received: Appendix B, Data Security
- BUS-80: Insurance Programs for Information Technology Systems
FERPA Policies
- RMP-12: Guidelines for Assuring Privacy of Personal Information in Mailing Lists and Telephone Directories
- Gramm-Leach-Bliley Compliance Plan
- Policies Applying to Campus Activities, Organizations and Students (PACAOS)-130 Disclosure of Information from Student Records
HIPAA
Other
- Statement on Principles of Scholarly Research and Public Records Requests
- UC Statement of Privacy Values, Privacy Principles, and Privacy Balancing Test
- UC Policy on Public Disclosure of Compensation Information
Laws Protecting Personal Information
State of California
- California Law about Notification in Instances of Security Breaches-effective July 1, 2003: California Civil Code Section 1798.29
- California Law Restricting Display of Social Security Numbers: California Civil Code Section 1798.85
- California State Constitution Article 1 Declaration of Rights, Section 1: “All people are by nature free and independent and have inalienable rights. Among these are enjoying and defending life and liberty, acquiring, possessing and protecting property, and pursuing and obtaining safety, happiness and privacy.”
- California Information Practices Act of 1977 (Civil Code §§1798-1798.28): Statute defines the limits established to protect the privacy of individuals in the maintenance and dissemination of personal information.
Federal Government
- Federal Law to Protect Consumers' Personal Financial Information: Gramm-Leach-Bliley Act of 1999
- Health Insurance Portability and Accountability Act of 1996 (HIPAA)
- Family Educational Rights and Privacy Act (FERPA)
- The Privacy Act of 1974, 5 U.S.C. § 552a: The Act regulates the collection, maintenance, use and dissemination of personal information by federal executive branch agencies.
Other Documents
- Organisation for Economic Cooperation and Development (OECD) Guidelines on the Protection of Privacy and Transborder Flows of Personal Data: These guidelines represent international consensus on the core principles guiding the collection and management of personal information by governments, business and consumer representatives in their efforts to protect privacy and personal data.