Educause Security Discussion mailing list archives

Re: Do students hold universities accountable for protecting their information?


From: Josh Callahan <josh.callahan () HUMBOLDT EDU>
Date: Mon, 11 Jun 2018 08:22:17 -0700

Hey Mac,

At this point, I'd say the answer is largely "no."  I agree the
expectations are there, but they are more de facto.  We all list damage to
institutional reputation when we are enumerating risks, but what I haven't
seen is a causal reaction where a major breach happens and students steer
away from that school to the point where FTE is impacted.

I think it's coming though, Europe's GDPR is being followed by some similar
state level legislation around the US.  That push is being driven by some
real frustration with this string of private sector revelations: Equifax,
Facebook, all the major carriers selling our location data and a feeling of
helplessness watching those happen with no real consequences.

-Josh

On Mon, Jun 11, 2018 at 7:07 AM, McIntosh, Keith <kmcintosh () richmond edu>
wrote:

Colleagues,



Someone recently asked me the following question and I wondered what you
would say.   I believe students and parents have reasonable expectations
that we are both protecting their information and ensuring privacy.



*  Do students hold universities accountable for protecting their
information?  *





*Keith W. "Mac" McIntosh*

he/his/him <https://www.mypronouns.org/>

Vice President and Chief Information Officer

Information Services


Jepson Hall G-12

28 Westhampton Way
<https://maps.google.com/?q=28+Westhampton+Way&entry=gmail&source=g>

University of Richmond, VA 23173

Office: 804.289.8771

Fax: 804.289.8988

http://is.richmond.edu


Email: kmcintosh () richmond edu

Twitter: @ <https://twitter.com/Keith_McIntosh>Keith_McIntosh
<https://twitter.com/Keith_McIntosh>






-- 
-------------------------------------------------
Josh Callahan
Information Security Officer and CTO
ITS :: Humboldt State University
1 Harpst St. Arcata CA 95521  707.826.3815

Current thread: