Resources
Location:

Privacy and Confidentiality: Holding IT Service Providers Accountable

Title:Privacy and Confidentiality: Holding IT Service Providers Accountable (ID: ERB0922)
Author(s):Nadine Stern (The College of New Jersey)
Topics:Confidentiality, Confidentiality Agreement or Statement, FERPA, GLB Act, HIPAA, Privacy, Service Provider Requirements
Origin:Research Bulletins, ECAR (11/03/2009)
Type:Articles, Papers, and Reports
Abstract:

This ECAR research bulletin addresses the data privacy issues that must be covered by contractual language when entering into an agreement for externally provided IT services or for external consulting about institutional systems. It covers instances in which external agents have access to data that is considered confidential and/or where data can be linked to personally identifiable records. It is based on work done at The College of New Jersey between November 2008 and May 2009.

Citation for this work: Stern, Nadine. “Privacy and Confidentiality: Holding IT Service Providers Accountable” (Research Bulletin, Issue 22). Boulder, CO: EDUCAUSE Center for Applied Research, 2009, available from http://www.educause.edu/ecar.

View this resource:

 
© Copyright 1999-2009 EDUCAUSE