Google Apps for Ed & HIPAA BAA, etc.

["Carr, Michael G" <michael.carr () UKY EDU>]

Of those of you who have embraced Google Apps for Education, how many of you either have already negotiated (or are in 
the process of negotiating):

(a)    A separate HIPAA BAA with Google,

(b)   A separate FERPA agreement with Google and/or

(c)    Separate agreements with Google relative to your state's data breach notification laws?

Or did Legal/Purchasing contend that Google's existing terms and conditions were sufficient?

Thanks,

Mike


--
Michael G. Carr, JD, CISSP, CIPP
Chief Information Security Officer
Univ of Kentucky Analytics & Technologies
122 Hardymon, Lexington KY 40506
859-218-0306
www.UKy.edu<http://www.uky.edu/> | Michael.Carr () UKy edu<mailto:Michael.Carr () UKy edu>

Treat your personal information like cash.

[If you cannot protect it dont collect it]