seeking data policy

[Theresa M Rowe <rowe () OAKLAND EDU>]

I am seeking sample policies that would govern the selection
of systems and solutions that provide for off-site storage of
student data.  Feedback on what you would evaluate or require
in contract review would be useful, too.

For example, we've had a rush in the last few months of
vendors offering hosted solutions.  In these solutions,
student data could be stored on a server off site.  Sample
systems are student portfolios and such.  We've had faculty
members initiate purchasing processes for such systems
without any IT security review or legal review - so we need a
policy.  Any suggested samples out there?
Theresa Rowe
Assistant Vice President
University Technology Services
www.oakland.edu/uts - the latest news from University Technology Services

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.