1. PRIVACY – A CIO’S VIEW Prepared by Chip German Presented to the Cornell/EDUCAUSE Institute for Computer Policy and Law 06.29.05

2. PRIVACY – A CIO’S VIEW SOME BACKGROUND: Chip is VP for IT/CIO at the University of Mary Washington His e-mail address is chip@umw.edu, and the University’s policy site is http://www.umw.edu/policieschip@umw.eduhttp://www.umw.edu/policies UMW is a public, liberal arts, master’s-level university in Virginia

3. PRIVACY – A CIO’S VIEW INSTITUTIONAL POLICY CONTEXT: Usually little constituent interest in the details of this kind of policy Significant policy experience fills vacuum Important: emphasis on policy setting not as a defensive measure but as an opportunity to express institutional character and values

4. PRIVACY – A CIO’S VIEW STATE OVERSIGHT CONTEXT: State government (first “cabinet-level” Secretary of Technology in US) believes it has authority on all IT issues, including privacy and security Corporate perspective dominates (citizen oversight boards populated by corporate IT officers)

5. PRIVACY – A CIO’S VIEW STANDARD CUSTOMER-ORIENTED PRIVACY: e.g. Gramm-Leach-Bliley compliance –http://www.umw.edu/policies/customerinfo/http://www.umw.edu/policies/customerinfo/ e.g. state-mandated web-site policy –http://www.umw.edu/policies/web/privacy/http://www.umw.edu/policies/web/privacy/ efforts to reduce use of SSNs usually not specific to institutional character and values – defensive policy

6. PRIVACY – A CIO’S VIEW PRIVACY, EMPLOYEE “RIGHTS” AND ACADEMIC FREEDOM: Rigorous process for DMCA or for investigative/legal discovery –http://www.umw.edu/policies/network/copyright_infringement/http://www.umw.edu/policies/network/copyright_infringement/ –http://www.umw.edu/policies/itsecurityprogram/incident_handling /it_security_incident_respo.phphttp://www.umw.edu/policies/itsecurityprogram/incident_handling /it_security_incident_respo.php

7. PRIVACY – A CIO’S VIEW PRIVACY, EMPLOYEE “RIGHTS” AND ACADEMIC FREEDOM : Drawing lines on monitoring that are appropriate to the academic enterprise –http://www.umw.edu/policies/web/monitoring_employee_electr/http://www.umw.edu/policies/web/monitoring_employee_electr/ –http://www.umw.edu/policies/web/monitoring_employee_electr/in _case_death_or_serious_d.phphttp://www.umw.edu/policies/web/monitoring_employee_electr/in _case_death_or_serious_d.php

8. PRIVACY – A CIO’S VIEW POLICY AS EXPRESSION OF CHARACTER: Affirmative Driven by a deep understanding of the values worth preserving, sometimes against a tide of emotion Resonant with cultural touchstones, i.e.: –http://www.aaup.org/statements/REPORTS/04AFelec.htmhttp://www.aaup.org/statements/REPORTS/04AFelec.htm