Educause Security Discussion
mailing list archives
Re: Federal laws applicable to Universities
From: Valerie Vogel <vvogel () EDUCAUSE EDU>
Date: Thu, 7 Nov 2013 21:15:14 +0000
I would also recommend the Higher Education Compliance Alliance, which is a centralized repository of
compliance-related information and resources: http://www.higheredcompliance.org/
You can search for resources by topic (some of which go beyond IT compliance). You'll also find compliance program
Valerie Vogel Program Manager
Uncommon Thinking for the Common Good
direct: 202.331.5374 | main: 202.872.4200 | educause.edu<http://www.educause.edu/>
From: Francisco Pérez <francisco.perez12 () UPR EDU<mailto:francisco.perez12 () UPR EDU>>
Reply-To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Date: Thursday, November 7, 2013 1:10 PM
To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Subject: Re: [SECURITY] Federal laws applicable to Universities
Thank you very much for your quick response!
On Thu, Nov 7, 2013 at 4:58 PM, Michael Cole <mcole () clarku edu<mailto:mcole () clarku edu>> wrote:
I’d add these 2 to your list as well.
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY ()
LISTSERV EDUCAUSE EDU>] On Behalf Of Francisco Pérez
Sent: Thursday, November 07, 2013 3:44 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Federal laws applicable to Universities
I know that FERPA, HIPAA( if healthcare data) and maybe PCI are applicable to Universities on the US. But there is any
other federal laws applicable or that Universities need to comply with?. Just working on fundamental laws for IT
Compliance on Universities.
Will appreciate your comments.
Information System Office
UPR-Medical Sciences Campus
francisco.perez12 () upr edu<mailto:francisco.perez12 () upr edu>
Confidentiality Notice: Any use, review, distribution or copying of this communication by anyone other than the named
recipient(s) is strictly prohibited. Please notify the sender immediately by e-mail if you have received this e-mail by
error and delete this e-mail from your system.
Please print this email only when necessary.