NACUBO Bulletin: Clarification on Applicability of FTC Safeguarding Rules

Published:
Briefs, Case Studies, Papers, Reports
Author(s) and Contributors:
Source(s) and Collection(s):
Sources(s): Higher Education Information Security Council (HEISC)
ParentTopics:
Family Educational Rights and Privacy Act (FERPA) Gramm-Leach-Bliley Act (GLB Act)

Abstract

Beginning May 23, 2003, colleges and universities must comply with provisions of the Gramm-Leach-Bliley (GLB) Act that relate to the safeguarding of personal and financial data, in accordance with final regulations promulgated by the Federal Trade Commission (FTC) last year. FTC counsel confirmed to NACUBO staff that the safeguarding rules do indeed apply to higher education institutions. Colleges and universities will be deemed to be in compliance with FTC privacy rules that also stem from the GLB Act - if they comply with the Family Educational Rights and Privacy Act (FERPA). The safeguarding rules are separate from the privacy rules, which were issued in May of 2000.

Download Resources