Educause Security Discussion mailing list archives

Re: RIAA Notices


From: Manuel Amaral <Manuel.Amaral () OLIN EDU>
Date: Thu, 29 Jan 2009 10:36:52 -0500

I'm curious whether institutions only perform these actions if they receive an RIAA/MPAA notification?   Do/would you 
go through the same process if you were to become aware of a user downloading/accepting/sharing/using illegally 
obtained copyright material, but it's not brought to your attention via RIAA/MPAA notification?

Hypothetically speaking;
If you became aware of one or more users violating copyright laws, whether by their own admission or otherwise, how 
would you handle it?  Would you handle it differently for students, faculty or staff?  Are there any potential 
liabilities for the institution if you don't act in some way?


Manny
---------------------------------------
Manuel (Manny) Amaral
Associate Director, Information Technology
Franklin W. Olin College of Engineering
Direct:   781-292-2433
 

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Ken 
Connelly
Sent: Tuesday, January 27, 2009 10:00 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] RIAA Notices

Brenda, et.al.  -

Our procedures are similar to most of the others reporting.  In terms of
penalties:

    * 1st offense
          o network shutoff
          o require removal of infringing content and p2p software
          o sign a statement acknowledging removal and a basic
            understanding of copyright,
            http://access.uni.edu/forms/its/actvstmnt.pdf
          o after the form is returned, network access is reinstated
    * 2nd offense
          o network shutoff for 30 days
          o referral to Dean of Students for administrative hearing (for
            students)
          o meeting with CIO for staff member and supervisor (for
            faculty/staff)
    * 3rd offense
          o permanent loss of network access
          o probably severe sanctions from Dean of Students and CIO, but
            we've never had a 3rd offense

- ken

Brenda B Gombosky wrote:
From reading all the threads - we must get more than our fair share - 
we are still averaging about 40 + a month.  We do not block P2P nor do 
we use NAT.  We use clean access in our dorms so we can track a 
student down to the bed in the room.  A little harder with wireless 
and with faculty staff as you have to dig through logs.
 
I am interested in know the Penalties in place - if any - Network 
shutoff?  Wired and Wireless? Length of time, first offense, second 
offense etc.
 
We are reviewing our policies right now and though the RIAA says it is 
backing off - we haven't seen it yet.
 
Thanks in advance for sharing your policy.
 
Brenda B. Gombosky, CISSP, CISM, CHSP
Director, Enterprise Security
Information Technology
University of Louisville
Miller IT Center, Room 109
Louisville, KY 40292
(502)852-5037
(502)419-6689


--
- Ken
=================================================================
Ken Connelly             Associate Director, Security and Systems
ITS Network Services                  University of Northern Iowa
email: Ken.Connelly () uni edu   p: (319) 273-5850 f: (319) 273-7373

Current thread: