Re: SOP for Releasing Private Data Generated by Deceased Student?

["Ullman, Catherine" <cende () BUFFALO EDU>]

Hi Bryce,

 

We typically defer to the Office of General Counsel and require the requestor to provide proof of authorization such as 
documentation that they’re executor of the will.  Here is our official policy:

 

 <http://www.buffalo.edu/ubit/policies/guidance-documents/accessing-accounts-deceased-incapacitated.html> 
http://www.buffalo.edu/ubit/policies/guidance-documents/accessing-accounts-deceased-incapacitated.html

 

Hope that helps.

 

Best,

Cathy

 

 

Dr. Catherine J Ullman

Senior Information Security Analyst

Information Security Office

University at Buffalo

 <mailto:cende () buffalo edu> cende () buffalo edu

 

 

 

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Bryce Cunningham
Sent: Wednesday, January 15, 2020 10:16 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] SOP for Releasing Private Data Generated by Deceased Student?

 

At the institutions I serve, we’ve had a few tragic cases of deceased students where the parents or other family 
requested access to the deceased’s emails, laptop contents, or both. If your institution has a request form or policy 
for this situation I’d appreciate you sharing it since I’ve been asked if we can establish a procedure that handles 
such requests in order to reduce our response time and improve consistency.  My question is only about policy and SOP, 
*not* the legal question of whether or not the data should be released (that is determined by whether the deceased has 
a Will covering their digital legacy).

 

Bryce Cunningham, MS, CISM, CISSP

Information Security Officer

Colleges of the Fenway: 

Mass College of Art and Design &

Wentworth Institute of Technology

C: 617-396-7052

 

 

 

 

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at  <https://www.educause.edu/community> https://www.educause.edu/community 


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Attachment: smime.p7s
Description: