- Created by Justin Lytle - Admin, last modified by Peterson, Michele on Sep 07, 2020
Policy identification number: IT-0005 | ||
File: Information Technology Policies | ||
Acceptable Use of Student and Employee Identification Numbers | ||
Policy Summary This policy establishes the requirements and restrictions regarding the use of Student or Employee Identification numbers. | ||
Policy Owner Vice President, Finance & Administration | Approval Date June 10, 2019 | Effective Date June 10, 2019 |
Search Terms acceptable, identification, numbers, a | Scheduled for Review Spring 2024 |
I. Policy Statement
All faculty, staff, employees, and departments of Fort Lewis College are expected to adhere to the following guidelines regarding the use of Student and Employee ID numbers:
|
II. Reason for PolicyColorado State statutes identify Employee and Student ID numbers as Personally Identifiable Information. Per the statute, reasonable security procedures and practices must be implemented and maintained to protect these data elements against unauthorized access or use. Additionally, the Federal Fair Credit Reporting Act require that appropriate measures are implemented to prevent identity theft. |
III. ResponsibilitiesFor following the policy: All employees and contracted vendors For enforcement of the policy: Information Security Officer For oversight of the policy: Vice President for Finance & Administration For notification of policy: Policy Librarian |
IV. DefinitionsPII: Personally Identifiable Information is defined in the “Classification of Data” policy. Stand-alone fashion: This refers to the use of an individual’s name and Student or Employee ID without any additional verification factors. Verification factor: This is information or a mechanism that can be used to verify the identity of an individual, such as passwords or photo ID cards. |
V. Cross-Referenced PoliciesClassification of Data Policy Colorado Revised Statutes C.R.S. § 24-73-101 The Fair Credit Reporting Act, Part 681 “Identity Theft Rules” U.S. Department of Education: FERPA Online Library
|
VI. Consequences of Non-ComplianceUsing Student and Employee numbers improperly puts individuals at risk of identity theft and financial fraud. Fines and penalties for improper use and management of Personally Identifiable Information can be levied by State, Federal, and International entities. Violations shall be handled consistent with College disciplinary procedures. The College may refer suspected violations of applicable law to appropriate law enforcement agencies. |