CODE OF RESPONSIBILITY FOR SECURITY AND PRIVACY OF STUDENT DATA
Federal law (the Family Educational Rights and Privacy Act of 1974, as Amended “FERPA”) is in effect to ensure the security and privacy of student information used in our operations. Thus, security and privacy is a matter of concern for all employees within Stanford University and any other persons who have access to our data systems or physical facilities. Each person working with students at Stanford University who has direct access to student records information holds a position of trust relative to this information and must recognize the responsibilities entrusted to them and this office in preserving the security and privacy of this information. Therefore, each person who is authorized to have access to any information through the facilities of this University is:
1. Not to make or permit unauthorized use of any information.
2. Not to seek personal benefit or permit others to benefit personally by any private information which has come to them by virtue of their work assignment and in accordance with University and office policies.
3. Not to exhibit or divulge the contents of any record or report to any person except in the conduct of their work assignment in accordance with University and office policies.
4. Not to knowingly include or cause to be included in any record or report a false, inaccurate or misleading entry.
5. Not to remove any official record (or copy) or report from the office where it is kept except in the performance of their duties.
6. Not to operate or request others to operate any University equipment for purely personal reasons.
7. Not to aid, abet or act in conspiracy with another to violate any part of this code.
8. To immediately report any violation of this code to the University Registrar: 866-993-7772, and all known and suspected privacy incidents to the University Privacy Office.
You should become familiar with the provisions of FERPA, particularly those regarding required consent to release information, the limited information that can be released for currently enrolled students without their consent, and how information is designated when the student has indicated that it cannot be released. Consult the University policy statement on Student Record Privacy under FERPA: https://registrar.stanford.edu/students/student-record-privacy.
As fellow stewards of official University records, we all share the responsibility for ensuring the security and privacy of the records and data we maintain. Please study the University statement on Student Record Privacy under FERPA.
A violation of this code may lead to reprimand, suspension, dismissal or other disciplinary action, consistent with the general personnel policies of the University.
