Higher education has been grappling with student infringement of copyright through peer-to-peer file-sharing software for many years. But dramatic changes have occurred over the past year, both for higher education through the Higher Education Act and in the wider context of the online entertainment space. Come join this facilitated discussion, following the preconference seminar and the general session on the topic earlier in the day, to share ideas and explore questions about this new world.

The EDUCAUSE Policy Program seeks to help community members translate public policy issues into concrete actions that support their institutional mission. This session will provide an overview of the policy program, highlighting the IT policy issues that are most relevant to higher education.

This group focuses on campus IT policy and legal issues and supports ongoing communication among participants in the EDUCAUSE/Cornell Institute for Computer Policy and Law annual seminar. Open to all, this meeting will address current topics such as peer-to-peer file sharing, privacy (including FERPA), social networking, network monitoring, and data retention. Meet new colleagues, exchange ideas, and learn new solutions.

Not a month has gone by in the past couple of years without a major news story related to the battle between the content industry and peer-to-peer file sharing over campus networks. While the RIAA has announced an end to lawsuits targeting individual users (including students), DMCA notices arrive at an ever-higher volume, and commercial ISPs have agreed (or have they?) to a "three strikes" policy. Ruckus has joined CDigix as a failed commercial source of online music, while Choruss and Noank dangle the carrot of a new business model based on blanket licensing.

Meanwhile, Tennessee now requires all campuses in the state to explain why they receive as many DMCA notices as they do; similar legislation has passed one house in Illinois, and legislative hearings have taken place in California and Texas. The final rules related to the P2P provisions in the Higher Education Authorization Act are scheduled for publication in November 2009. During this workshop you'll learn about the requirements and options governing how campus networks deal with P2P today and hear speculation about what the future will bring.

Illinois State University's Digital Citizen Project teamed up with Carnegie Melon University researchers to conduct multidisciplinary qualitative and quantitative analysis and studies of data regarding media downloading. Come see how this data informed the campus's current approach to P2P. The implications of the recent Higher Education Act for higher education and industry will also be discussed.

This session will explain the basics of the DMCA and present a range of options to help the IT organization tailor an institutional approach to address DMCA-related issues. Panelists will address specific strategies and how to move decisions out of IT and into the rest of the campus.

This group focuses on campus IT policy and legal issues and supports ongoing communication among participants in the EDUCAUSE/Cornell Institute for Computer Policy and Law annual seminar. Open to all, this meeting will address current topics such as peer-to-peer file sharing, privacy (including FERPA), social networking, network monitoring, and data retention. Meet new colleagues, exchange ideas, and learn new solutions.

Everyone within an institution of higher education has a responsibility to access, use, and disclose organizational information in a responsible manner, compliant with institutional policy and legal statutes. This responsibility extends to other parties granted access to institutional information. Improper maintenance, disposal, or release of institutional administrative information exposes the organization to significant risk. A comprehensive information management program will improve the information-handling and administrative processes, the security of private information, and the management of institutional records and will facilitate the preservation of the institutional memory. Explore from three different institutional perspectives the interplay of a variety of information management topics including building support and buy-in, developing records retention and disposition schedules, managing electronic records, effectively administering e-discovery and requests for release of records, handling inappropriate release of information, implementing data classification and security requirements, maintaining the privacy and security of information, and developing policies and educational requirements.

The use of electronic mail by university employees has become the standard for business communication, yet its use has not been accompanied by records management solutions. With the passage in December 2006 of amendments to the federal rules of civil procedure, however, all "electronically stored information" including e-mail has explicitly been identified as an important source of evidence in federal lawsuits. Thus, university employees at both public and private institutions of higher education must manage their e-mail in a legally compliant manner. The University of Wisconsin System has implemented a records management program whereby all 42,000 employees receive the training, tools, resources, and legal authority to manage their e-mail accounts. This project affords other institutions the opportunity to use components of the program and integrate them into their own efforts to provide employees with guidance on managing e-mail in a legally compliant manner. Note that this seminar will provide transferable guidance that can be used within any information system.

This event will also be broadcast live on video. See http://www.ucpl.cornell.edu/ for more information.

This session will contrast our actual experiences vis-a-vis the best practices learned from attending Cornell's Institutional Policy Development Program. We will use a question-and-answer format to engage the audience in discussing the challenges we face in attempting to implement an institutional policy framework in public research university settings.

Do faculty, staff, and students have preconceived notions about the level of privacy they can expect? Is this the same as what they get? What is the minimum level of information required? Who needs to know what? Please come with questions, answers, and best practices to share.

This group focuses on campus IT policy and legal issues and supports ongoing communication among participants in the EDUCAUSE/Cornell Institute for Computer Policy and Law annual seminar. Open to all, this meeting will address current topics such as peer-to-peer file sharing, privacy (including FERPA), social networking, network monitoring, and data retention. Meet new colleagues, exchange ideas, and learn new solutions. For more information, see: http://www.educause.edu/groups/icpl

This seminar will include practical tips on what to do if your institution receives a request to produce electronic documents or data both before and during litigation, as well as strategies for making responses to such requests efficient and productive. It will include a discussion of the new federal regulations on electronic documents in litigation, cover important steps administrators must take to protect confidential documents and privileged communications with counsel, and review the institution's obligations to protect the privacy of sensitive data in electronic documents and databases.

The seminar will also address basic principles for establishing and implementing effective and legally compliant record retention and destruction policies for electronic documents and data. We will draw on the experiences of a large public university system in implementing electronic records policies and in managing electronically stored information in the context of litigation, including the Google Print Project copyright litigation.

This workshop has four main sections. First we will present an overview of the policy development life cycle, allowing time for group discussion of how the stages relate to individual campuses. Writing a policy is only one step in the process: beforehand, you must identify stakeholders and solicit their support and place the policy in the context of institutional values; afterwards, the policy must be approved by the right groups, distributed, promoted, interpreted, enforced, and reviewed.

In the second section we will describe a security policy gap-analysis process based on industry-standard categories that shows how to prioritize policies based on risk and relates the process to the institutional security program. The third section will present an overview of model security policy collected by the EDUCAUSE Model Security Policy Subcommittee for its wiki. The fourth and final section will offer practical exercises in writing good policy, including a case study approach.

The government is increasingly looking to Internet service providers, including colleges and universities, as a source of communications data to aid in the investigation and prosecution of illegal behavior. Recent government initiatives include the USA PATRIOT Act, CALEA, and European Union Data Directive. This session will explore emerging legal and policy issues for higher education as Internet access and content providers.

This Constituent Group focuses on policy and legal issues and supports ongoing communication among participants in the EDUCAUSE/Cornell Institute for Computer Policy and Law annual seminar. This meeting, open to all, will address issues ranging from harassment, pornography, and privacy to commerce and intellectual property concerns. Meet new colleagues, exchange ideas, and learn new solutions.

Data privacy protection has become a key concern in higher education. In this session we will discuss the kinds of security incidents that potentially compromise data privacy and what schools are doing to lessen the risk. We will also discuss preparations your campus can make to deal with a data privacy incident.

This session will provide an overview of EDUCAUSE policy program resources and how they can help your campus. This session is designed to be a dialogue between the staff and participants and is an excellent opportunity to ensure that your policy concerns are being addressed by EDUCAUSE.
Who Should Attend: Any higher education IT practitioner -- CIO's, administration, legal counsel, librarian, faculty, student -- that uses their institution's IT network and is impacted by new IT-related regulations.
What Attendees will Learn: A thorough understanding of EDUCAUSE policy program functions and how you can utilize its resources to your full advantage.

In this session we will discuss both the substance and process of developing an information security program for institutional data.

Thoughtful e-learning policies can significantly reduce faculty workload issues, reduce student frustration, and keep an e-learning course running smoothly. This presentation will provide examples of e-mail policies, electronic discussion policies, assignment policies, help policies, and many others. These examples are drawn from the e-learning policies recommended to the faculty of Embry-Riddle Aeronautical University.

This Constituent Group focuses on policy and legal issues and supports ongoing communication among participants in the EDUCAUSE/Cornell Institute for Computer Policy and Law annual seminar. This meeting, open to all, will address issues ranging from harassment, pornography, and privacy to commerce and intellectual property concerns. Meet new colleagues, exchange ideas, and learn new solutions.

Scholars producing complex born-digital scholarship need new models of institutional support, including different distribution channels for finished projects. Libraries are thus expanding their roles beyond archiving to include technical and legal developmental support and dissemination. What policy frameworks are needed when we commit to stable, long-term collection of digital scholarship?

This session will provide an overview of EDUCAUSE policy program resources and how they can help your campus. This session is designed to be a dialogue between the staff and participants and is an excellent opportunity to ensure that your policy concerns are being addressed by EDUCAUSE.

This seminar will cover copyright law as it applies to creating and managing digital libraries and their use in online instruction. Topics will include licensing digital content through Creative Commons licenses and other means, digital rights management, the TEACH Act, and authenticating and securing digital content.

This workshop will improve participants' understanding of the connection between distributed learning behavior and corresponding university intellectual property policies. You will receive the necessary tools to build a progressive and comprehensive institutional intellectual property policy: national data, an intellectual property policy repository, a learning technology strategic planning template, and an intellectual property policy template.

The presenters will describe the key elements of an effective policy development life cycle, allowing for group discussion of each part of the cycle as it relates to participants' home institutions and policies. Then, a guided hands-on policy writing workshop will allow participants to draft one or two policies that are most relevant to their institution's current needs.

Every organization that manages, uses, stores personal data needs to have an incident support plan in place. Being proactive in the planning and management of a privacy incident will improve your ability to successfully weather any privacy incident. It will also improve/promote the culture of privacy for which your overall program depends upon. This audio conference will provide you immediately usable information on: the law and regulation requirements, organizational responsibility for handling incidents, organizational roles and responsibilities, rightsizing the response effort, the importance of the initial response, keeping/reporting metrics, using the incident to improve your program, and related best practices.

The theme of the 15th annual conference on Computers, Freedom & Privacy is "Panopticon 2005". CFP serves as an internationally recognized forum for the members of the technical, government, hacker, legal, business, education, media, cyber-rights, and non-profit communities to address cutting edge technical, business, legal and cultural issues.

This seminar will provide an overview of federal and state laws that govern information security and privacy. An information security governance framework, based upon agency regulations and international standards, will be introduced as a model approach for ensuring institutional compliance. There will also be a hands-on workshop for the development of essential security and privacy policies and procedures for higher education environments. Brought to you by the EDUCAUSE/Cornell Institute for Computer Policy and Law.

Faced with new federal laws, new legal liabilities, and the costs associated with poor information security, college and university information technology leadership must define, communicate, and begin to implement a unified information security vision. We will describe how this was accomplished at the University of Pennsylvania.

The Net@EDU working groups have been active in efforts to shape national telecommunications policy to enable affordable broadband and IP-enabled services. Discussion will center on the comments filed by the working groups before the Federal Communications Commission for EDUCAUSE and its partners. Presenters will provide insights on how the higher education community can help educate federal policymakers on issues such as CALEA and the new Telecommunications Act.

This Constituent Group focuses on policy and legal issues and supports ongoing communication among participants in the EDUCAUSE/Cornell Institute for Computer Policy and Law annual seminar. This meeting, open to all, will address issues ranging from harassment, pornography, and privacy to commerce and intellectual property concerns. Meet new colleagues, exchange ideas, and learn new solutions.

Presenters will describe key elements of an effective policy development life cycle, allowing for group discussion of each part of the cycle and its relevance to participants' home institutions/policies. Now in its fourth year, this seminar has been modified to allow detailed discussions of the cycle and how to build success.

This workshop will be a guided, hands-on policy writing experience that will follow the policy template from "Model Approaches to Policy Development." Participants will choose two or three topics on which to focus and will leave with a first draft to take back to their home institutions for refinement. Previous years' "Model Approaches to Policy Development" participants are welcome to attend.

This seminar will address policy process and substance for those attempting to integrate security policy into a broader vision for their organization, covering security, privacy, mass e-mailing, escrow of encryption keys, access to e-mail, authentication and authorization, domain name conventions, and responsible/acceptable use, with a special focus on compliance with federal legislation regarding copyright and protected data.

Two years after the USA PATRIOT Act was passed, presenters focus on real-life impacts felt and policies implemented at institutions of higher education and in libraries. The discussion will include information on how individual campuses are implementing the act in relation to campus IT units and libraries. Interaction with other federal and state laws will also be explored, as well as future policy implications. Attendees will gain a better understanding of how the laws may impact their role on campus and how other universities have been impacted and responded to date.

The Congressional Internet Caucus Advisory Committee hosted a lunch panel on "Wiretapping The Internet: Is VoIP Different?" on May 20, 2004. The expert panel debated whether law enforcement can and should wiretap real-time Internet communications such as Voice over Internet Protocol (VoIP). The panel debated the U.S. Department of Justice's (USDOJ) current scope of authority to tap Internet communications, its VoIP proposal for more authority under the Communications Assistance for Law Enforcement Act (CALEA) before the FCC, and whether Congress will have to again consider granting more Internet wiretapping authority to USDOJ in the future.

Legal, ethical, and technical issues abound in the recent surge of P2P file sharing of copyrighted works both on campus and off. At the same time, the content and Internet industries are exploring a variety of new products and business models that offer legal solutions to online distribution. What are the interests and roles of campus leaders in these developments? Hear four prominent leaders of the higher education and the entertainment communities discuss their perspectives on these important questions.

Peer-to-peer file sharing continues to challenge our policies and procedures for enforcing copyright laws. The presenters, directors of the EDUCAUSE/Cornell Institute for Computer Policy and Law, review current legal requirements and best practices, compare today's problems with some surprisingly similar historical examples, and speculate about what the future will bring.

Court cases concerning Internet governance coupled with specific anti-terrorism legislation have greatly enhanced the breadth and depth of law affecting information technologies in higher education. This session covers recent and relevant legal matters and a range of policy responses, including homeland security, the TEACH Act, and SEVIS. Proposed legislation, such as the Consumer Broadband Act and the Piracy Prevention Act, will be also be discussed. (Seminar 07F)

This seminar will focus on the elements of effective policy development, including an overview of several institutional approaches to developing information technology policies. Participants will also work in small groups on two or three policy topics to explore policy frameworks and will sample policies that may be adaptable for their institutions. (Seminar 13A)

Presenters will brief attendees on current and pending federal cybersecurity laws and regulations, including how the higher education community is expected to comply while struggling to maintain the openness of the academy and privacy of network users. The progress of the EDUCAUSE/Internet2 Computer and Network Security Task Force and how attendees can become more actively involved in influencing federal and campus IT security policies will also be discussed. (Seminar 14P)