University Policies | University Privacy

<!DOCTYPE html> <html lang="en" dir="ltr"> <head> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta charset="utf-8" /> <style>body #backtotop {left: 50%; margin-left: -50px;}</style> <script async src="https://www.googletagmanager.com/gtag/js?id=G-YFE455JBK9"></script> <script>window.dataLayer = window.dataLayer || [];function gtag(){dataLayer.push(arguments)};gtag("js", new Date());gtag("set", "developer_id.dMDhkMT", true);gtag("config", "G-YFE455JBK9", {"groups":"default","cookie_domain":"privacy.cornell.edu","page_placeholder":"PLACEHOLDER_page_location","allow_ad_personalization_signals":false});</script> <meta name="Generator" content="Drupal 10 (https://www.drupal.org)" /> <meta name="MobileOptimized" content="width" /> <meta name="HandheldFriendly" content="true" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="/themes/custom/cwd_privacy_office/favicon.ico" type="image/vnd.microsoft.icon" /> <link rel="canonical" href="https://privacy.cornell.edu/privacy-framework/university-policies" /> <link rel="shortlink" href="https://privacy.cornell.edu/node/49" /> <title>University Policies | University Privacy</title> <link href="https://fonts.googleapis.com/css?family=Open+Sans:300,400,400i,600,600i,700,700i%7CAssistant:300,400,600" rel="stylesheet"> <link rel="stylesheet" media="all" href="/sites/default/files/css/css_WuxZYd5Nh8luyqMqGspOj-Ac8uv8IrycPQjulN_ikyo.css?delta=0&language=en&theme=cwd_privacy_office&include=eJxljOEKAyEMg1_IzV97nqLVk2LXiva2-fbzjsEGg0DyhZAYsILpUvPxm4FQxWHNiUz7DRrvhQTasSBJWQwiK1b_C27MYfm-fkZ2-ExwBF9YY-DLsMkk5exbp0fACbpthH-L_LLl1ae-t8DXD74BJK9CmA" /> <link rel="stylesheet" media="all" href="/sites/default/files/css/css_R6GDwtXW9U9BsZDhBlTZ8pztGLrWJeZhhdTllRvWHrk.css?delta=1&language=en&theme=cwd_privacy_office&include=eJxljOEKAyEMg1_IzV97nqLVk2LXiva2-fbzjsEGg0DyhZAYsILpUvPxm4FQxWHNiUz7DRrvhQTasSBJWQwiK1b_C27MYfm-fkZ2-ExwBF9YY-DLsMkk5exbp0fACbpthH-L_LLl1ae-t8DXD74BJK9CmA" /> <script src="/sites/default/files/js/js_CPWBDcXANPnQTUZ0vlHhMxhCD-wlbqT4ZvJntunGuyA.js?scope=header&delta=0&language=en&theme=cwd_privacy_office&include=eJxliwEKwzAMAz_ULk8yjuNmXk0dYndbfr_CBoUVBJIOKSOtEHaopXxmePhUzaoy4IY6QsjTP5joVSCjc6pqGXX2GCpbPfmdsXCfnbq0-O5blyfSAFsWocuT33H4mkrfG-rtVz8ZeUD9"></script> <link rel="stylesheet" type="text/css" href="//cdn.datatables.net/1.10.22/css/jquery.dataTables.css"> <script type="text/javascript" charset="utf8" src="//cdn.datatables.net/1.10.22/js/jquery.dataTables.js"></script> </head> <body class="autosize-header cu-seal secondary-page type-page sidebar sidebar-left sidebar-tint"> <div id="skipnav"><a href="#main">Skip to main content</a></div> <div id="brand" class="band"> <header id="cu-header"> <div class="cu45-helper"></div> <div class="container-fluid cu-brand"> <div class="print-logo"><img class="print-logo-img" src="/themes/custom/cwd_privacy_office/images/logos/fine_cornell_seal_red.svg" alt="Cornell University" /></div> <div class="cu-logo"><a href="//www.cornell.edu"> <img class="sr-only" src="/themes/custom/cwd_base/images/cornell/bold_cornell_logo_simple_b31b1b.svg" alt="Cornell University" width="245" height="62"> </a></div> <div class="cu-unit"> <div id="sitename" class="h1"> <a href="/">University Privacy</a> </div> </div> </div> <div class="alt-search-45-banner"> <div class="alt-search-45-container container-fluid"> <nav id="utility-navigation" aria-label="Supplementary Navigation"> <ul class="menu list-menu links"> <li class="menu-item"> <a href="/a-z-topics" data-drupal-link-system-path="a-z-topics">A-Z Topics</a> </li> </ul> </nav> <div class="alt-search"> <form id="cu-search-form" role="search" action="/search/node/"> <label for="cu-search-query" class="sr-only">Search:</label> <input type="text" id="cu-search-query" name="keys" value="" size="30" placeholder="Search..."> <div class="search-filters" role="radiogroup" aria-label="Search Filters"> <h2 class="sr-only">Search Filters:</h2> <input type="radio" id="cu-search-filter1" name="sitesearch" value="thissite" checked="checked"> <label for="cu-search-filter1"><span class="sr-only">Search </span>Privacy</label> <input type="radio" id="cu-search-filter2" name="sitesearch" value="cornell"> <label for="cu-search-filter2"><span class="sr-only">Search </span>Cornell</label> </div> <button name="btnG" id="cu-search-submit" type="submit" value="go">Search</button> </form> </div> <div class="buttons">  <button class="mobile-button" id="alt-search-button-mobile" aria-haspopup="true" aria-expanded="false">Toggle Search</button> <button class="mobile-button" id="mobile-nav">Main Menu</button> </div> </div> </div> </header> <div id="site-header"> <nav class="dropdown-menu dropdown-menu-on-demand" id="main-navigation" aria-label="Main Navigation"> <div class="container-fluid"> <a id="mobile-home" href="/"><span class="sr-only">Home</span></a> <ul class="menu list-menu links"> <li class="menu-item"> <a href="https://auditriskcompliance.cornell.edu/" title="Home">OCRO Home</a> </li> <li class="menu-item menu-item--expanded"> <a href="/about-university-privacy-office" aria-expanded="false" aria-haspopup="true" data-drupal-link-system-path="node/12">About Us</a> <ul class="menu list-menu links"> <li class="menu-item"> <a href="/about-us/our-services" data-drupal-link-system-path="node/52">Our Services</a> </li> <li class="menu-item"> <a href="/about-us/key-partners" data-drupal-link-system-path="node/76">Key Partners</a> </li> <li class="menu-item"> <a href="/about-us/organization" data-drupal-link-system-path="node/26">Organization</a> </li> <li class="menu-item"> <a href="/webform/contact-us" data-drupal-link-system-path="node/95">Contact Us</a> </li> </ul> </li> <li class="menu-item menu-item--expanded"> <a href="/privacy-cornell" aria-expanded="false" aria-haspopup="true" data-drupal-link-system-path="node/32">Privacy at Cornell</a> <ul class="menu list-menu links"> <li class="menu-item"> <a href="/privacy-cornell/university-privacy-statement" data-drupal-link-system-path="node/66">University Privacy Statement</a> </li> <li class="menu-item"> <a href="/privacy-cornell/privacy-principles-cornell" data-drupal-link-system-path="node/48">Privacy Principles at Cornell</a> </li> <li class="menu-item"> <a href="/privacy-cornell/university-privacy-committee" data-drupal-link-system-path="node/42">University Privacy Committee</a> </li> </ul> </li> <li class="menu-item menu-item--expanded menu-item--active-trail"> <a href="/privacy-framework" aria-expanded="false" aria-haspopup="true" data-drupal-link-system-path="node/44">Privacy Framework</a> <ul class="menu list-menu links"> <li class="menu-item"> <a href="/privacy-framework/key-regulations" data-drupal-link-system-path="node/83">Key Regulations</a> </li> <li class="menu-item menu-item--active-trail"> <a href="/privacy-framework/university-policies" data-drupal-link-system-path="node/49" class="is-active" aria-current="page">University Policies</a> </li> <li class="menu-item"> <a href="/privacy-framework/resources" data-drupal-link-system-path="node/97">Resources</a> </li> </ul> </li> <li class="menu-item menu-item--expanded"> <a href="/information-use" aria-expanded="false" aria-haspopup="true" data-drupal-link-system-path="node/91">Information Use</a> <ul class="menu list-menu links"> <li class="menu-item menu-item--collapsed"> <a href="/information-use-cornell" data-drupal-link-system-path="node/68">Information Use at Cornell</a> </li> <li class="menu-item"> <a href="/information-use/use-location-data" data-drupal-link-system-path="node/82">Use of Location Data</a> </li> </ul> </li> <li class="menu-item"> <a href="/report-concern" data-drupal-link-system-path="node/67">Report a Concern</a> </li> </ul> </div> </nav> </div> </div> <div class="sidebar band" id="main-content"> <main id="main" class="container-fluid aria-target" tabindex="-1"> <div class="row"> <div id="sidebar-top" class="secondary"> <nav class="secondary-navigation drupal-section-navigation mobile-expander" aria-label="Section Navigation"> <ul class="menu"> <li class="menu-item"> <a href="https://auditriskcompliance.cornell.edu/" title="Home">OCRO Home</a> </li> <li class="menu-item menu-item--expanded"> <a href="/about-university-privacy-office" data-drupal-link-system-path="node/12">About Us</a> <ul class="menu"> <li class="menu-item"> <a href="/about-us/our-services" data-drupal-link-system-path="node/52">Our Services</a> </li> <li class="menu-item"> <a href="/about-us/key-partners" data-drupal-link-system-path="node/76">Key Partners</a> </li> <li class="menu-item"> <a href="/about-us/organization" data-drupal-link-system-path="node/26">Organization</a> </li> <li class="menu-item"> <a href="/webform/contact-us" data-drupal-link-system-path="node/95">Contact Us</a> </li> </ul> </li> <li class="menu-item menu-item--expanded"> <a href="/privacy-cornell" data-drupal-link-system-path="node/32">Privacy at Cornell</a> <ul class="menu"> <li class="menu-item"> <a href="/privacy-cornell/university-privacy-statement" data-drupal-link-system-path="node/66">University Privacy Statement</a> </li> <li class="menu-item"> <a href="/privacy-cornell/privacy-principles-cornell" data-drupal-link-system-path="node/48">Privacy Principles at Cornell</a> </li> <li class="menu-item"> <a href="/privacy-cornell/university-privacy-committee" data-drupal-link-system-path="node/42">University Privacy Committee</a> </li> </ul> </li> <li class="menu-item menu-item--expanded menu-item--active-trail"> <a href="/privacy-framework" data-drupal-link-system-path="node/44">Privacy Framework</a> <ul class="menu"> <li class="menu-item"> <a href="/privacy-framework/key-regulations" data-drupal-link-system-path="node/83">Key Regulations</a> </li> <li class="menu-item menu-item--active-trail"> <a href="/privacy-framework/university-policies" data-drupal-link-system-path="node/49" class="is-active" aria-current="page">University Policies</a> </li> <li class="menu-item"> <a href="/privacy-framework/resources" data-drupal-link-system-path="node/97">Resources</a> </li> </ul> </li> <li class="menu-item menu-item--expanded"> <a href="/information-use" data-drupal-link-system-path="node/91">Information Use</a> <ul class="menu"> <li class="menu-item menu-item--expanded"> <a href="/information-use-cornell" data-drupal-link-system-path="node/68">Information Use at Cornell</a> </li> <li class="menu-item"> <a href="/information-use/use-location-data" data-drupal-link-system-path="node/82">Use of Location Data</a> </li> </ul> </li> <li class="menu-item"> <a href="/report-concern" data-drupal-link-system-path="node/67">Report a Concern</a> </li> </ul> </nav> </div> <article id="main-article" class="primary"> <div id="block-cwd-privacy-office-breadcrumbs" class="block block-system block-system-breadcrumb-block"> <nav class="breadcrumb" aria-labelledby="system-breadcrumb"> <div id="system-breadcrumb" class="visually-hidden">Breadcrumb</div> <ul class="list-menu"> <li> <a href="/"><span class="limiter">Home</span></a> </li> <li> <a href="/privacy-framework"><span class="limiter">Privacy Framework</span></a> </li> <li> <span class="limiter" aria-current="page">University Policies</span> </li> </ul> </nav> </div> <section> <div data-drupal-messages-fallback class="hidden"></div> <h1>University Policies</h1> <div class="node-body"> <p class="intro">Cornell has a number of policies that define the appropriate use of data we collect about faculty, staff, student, alumni, visitors, etc.  </p> <p>Key policies related to data privacy and use include:</p> <p><strong>University Record Retention, </strong><a href="https://policy.cornell.edu/policy-library/retention-university-records"><strong>University Policy 4.7</strong></a>: Cornell University requires that university records be disposed of or retained for specific periods of time in accordance with legal or other institutional requirements, or for historical value. The university has designated official repositories to manage the retention and disposal of these records.</p> <p><strong>University Record Storage Registry, </strong><strong><a href="https://policy.cornell.edu/policy-library/administrative-data-store-registry">University Policy 5.11</a></strong>: requires operating units to document where these resources are stored, how they are secured, and how they can be used in accordance with other related university policies. </p> <p><strong>Data stewardship and custodianship, </strong><strong><a href="https://policy.cornell.edu/policy-library/data-stewardship-and-custodianship">University Policy 4.12</a></strong>: <em>Data Stewards define appropriate use of data. In turn, Unit Custodians of data ensure proper adherence to policy and security of this data. </em></p> <p><strong>Access to Student Information,</strong> <strong><a href="https://policy.cornell.edu/policy-library/access-student-information">University Policy 4.5</a></strong>:<em> </em>It is the policy of Cornell University to comply with the Family Educational Rights and Privacy Act, 20 U.S.C. § 1232g ("FERPA").</p> <p><strong>Access to Cornell Alumni Affairs and Development Information</strong>, <strong><a href="https://policy.cornell.edu/policy-library/access-cornell-alumni-affairs-and-development-information">University Policy 4.4</a></strong>: Cornell University respects the privacy of alumni affairs and development information and limits access to that information to authorized individuals.</p> <p><strong>Access to Information Technology Data and Monitoring Network Transmissions,</strong> <strong><a href="https://policy.cornell.edu/policy-library/access-information-technology-data-and-monitoring-network-transmissions">University Policy 5.9</a></strong>: Cornell University does not monitor the content of network traffic except for legal, policy, or contractual compliance; in the case of a health or safety emergency; or for the maintenance and technical security of the network.</p> <p><strong>Data Stewardship and Custodianship, <a href="https://policy.cornell.edu/policy-library/data-stewardship-and-custodianship">University Policy 4.12</a></strong>: The university expects all stewards and custodians of its administrative data to manage, access, and utilize this data in a manner that is consistent with the university's need for security and confidentiality. Cornell University administrative functional areas must develop and maintain clear and consistent procedures for access to university administrative data, as appropriate.<br> <br> <strong>Information Security, </strong><strong><a href="https://policy.cornell.edu/policy-library/information-security">University Policy 5.10</a></strong>: Cornell University expects all institutional information stewards and custodians who have access to and responsibilities for institutional information to manage it according to the rules regarding storage, disclosure, access, classification of information and minimum privacy and security standards as set forth in this policy.</p> <p><strong>Responsible Use of Video Surveillance Systems,</strong><strong> <a href="https://policy.cornell.edu/policy-library/responsible-use-video-surveillance-systems">University Policy 8.1</a></strong>:<span> </span>Cornell University allows the use of approved video surveillance systems through a transparent process, subject to rules governing equipment installation and employment, and use of the resulting recorded material. Cornell University aims to provide a secure environment for members of its community and to protect personal safety and property, assisted by video surveillance systems technology. Such technologies, however, must be used only to meet the university’s critical goals for security, and in a manner that is sensitive to interests of privacy, free assembly, and expression.</p> <p><strong>Responsible Use of Electronic Communications, <a href="https://policy.cornell.edu/policy-library/responsible-use-information-technology-resources">University Policy 5.1</a></strong>: Cornell University requires people who use its information technology resources to do so in a responsible manner, abiding by all applicable laws, policies, and regulations.</p> <p><strong>Stewardship and Custodianship of Electronic Mail, <a href="https://policy.cornell.edu/policy-library/use-escrowed-encryption-keys">University Policy 5.3</a></strong>: The university strives to protect electronic mail from inappropriate access or disclosure in order to contribute to the trust of university information technology systems and comply with relevant regulations, laws, and policies regarding the protection of certain types of data.</p> <p><strong>Standards of Ethical Conduct</strong>, <strong><a href="https://policy.cornell.edu/policy-library/standards-ethical-conduct">University Policy 4.6</a>: </strong>Cornell University expects all executive officers, trustees, faculty, staff, student employees, and others, when acting on behalf of the university, to maintain the highest standard of ethical conduct.</p> <p><strong>Interim Anti-Doxxing Policy, <a href="https://policy.cornell.edu/policy-library/interim-anti-doxxing-policy" title="University Policy 4.24, Interim Anti-Doxxing Policy">University Policy 4.24</a></strong>: Cornell community members should respect others’ rights to keep their personal information private.</p> <p>The<strong> <a href="https://policy.cornell.edu/policy-library/student-code-conduct">Campus Code of Conduct</a></strong> sets forth standards of behavior that apply to all faculty, students, staff, and university-registered organizations. Regarding computer usage, the Code of Conduct specifically makes it a violation "to recklessly or maliciously interfere with or damage, in violation of university rules, computer or network resources or computer data, files, or other information." The Code also makes it clear that "misappropriation of data or copyrighted materials, including computer software, may constitute theft." Violations of university policies, including computer usage policies, also constitute violations of the Code of Conduct. </p> <p>The <a href="https://theuniversityfaculty.cornell.edu/academic-integrity/"><strong>Code of Academic Integrity</strong></a> was adopted by the Faculty Council of Representatives and applies to all students. It prescribes adherence to a set of values, expected not only in coursework, but also in the use of university resources. The code includes computer and network related concepts and examples of violations, such as: initiating or encouraging the promulgation of chain letters and other types of electronic broadcast messages, tapping phone lines or other network cables, subverting or obstructing a computer or network by introducing a worm or virus, supplying false or misleading information to access computer or network systems, improperly obtaining or using another's password to access computers or network systems, and unauthorized access to data, computers or networks.</p> </div> </section> </article> </div> </main> </div> <footer> <div class="main-footer"> <div class="container-fluid sidebar-left"> <div class="row"> <div class="primary"> <div id="block-footer-relatedlinks" class="block block-block-content block-block-content44e04a75-2552-45f2-9aec-afc58ae6018d"> <h2>See Also:</h2> <div class="padded two-col"> <div> <p><a href="https://complianceandrisk.cornell.edu/">OCRO Home</a></p> </div> <div> <ul> <li> <p><a href="https://cornellprod.sharepoint.com/sites/UPO/privacy-site/SitePages/Home.aspx">Staff Portal</a></p> </li> <li> <p><a href="https://tdx.cornell.edu/">TDX Portal</a></p> </li> </ul> </div> </div> </div> </div> <div class="secondary"> <div id="block-footer-contactus" class="block block-block-content block-block-content587de979-b0d9-4e86-b7af-684f85ebc902"> <h2>University Privacy</h2> <p>395 Pine Tree Road, Suite 330<br> East Hill Office Building<br> Ithaca, NY 14850</p> <p><a data-entity-substitution="canonical" data-entity-type="node" data-entity-uuid="8f68c94d-743c-4b90-b555-af110bdfe930" href="/webform/contact-us" title="Contact Us">Contact Us</a></p> </div> </div> </div> </div> </div> <div class="sub-footer"> <div class="container-fluid"> <div class="row"> <div class="sub-footer-menus"> <ul class="custom inline no-bullet"> <li><a href="https://www.cornell.edu">Cornell University</a> ©2024</li> <li><a href="https://privacy.cornell.edu/">University Privacy</a></li> </ul> <ul class="custom inline no-bullet"> <li class="admin-login"><a href="/saml/drupal_login/cornell_prod">Admin</a></li> <li><a href="https://accessibility.cornell.edu/information-technology/web-accessibility/web-accessibility-assistance/">Web Accessibility Assistance</a></li> </ul> </div> </div> </div> </div> </footer> <script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","pathPrefix":"","currentPath":"node\/49","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"back_to_top":{"back_to_top_button_trigger":100,"back_to_top_speed":1200,"back_to_top_prevent_on_mobile":false,"back_to_top_prevent_in_admin":true,"back_to_top_button_type":"image","back_to_top_button_text":"Back to top"},"google_analytics":{"account":"G-YFE455JBK9","trackOutbound":true,"trackMailto":true,"trackTel":true,"trackDownload":true,"trackDownloadExtensions":"7z|aac|arc|arj|asf|asx|avi|bin|csv|doc(x|m)?|dot(x|m)?|exe|flv|gif|gz|gzip|hqx|jar|jpe?g|js|mp(2|3|4|e?g)|mov(ie)?|msi|msp|pdf|phps|png|ppt(x|m)?|pot(x|m)?|pps(x|m)?|ppam|sld(x|m)?|thmx|qtm?|ra(m|r)?|sea|sit|tar|tgz|torrent|txt|wav|wma|wmv|wpd|xls(x|m|b)?|xlt(x|m)|xlam|xml|z|zip"},"data":{"extlink":{"extTarget":false,"extTargetAppendNewWindowLabel":"(opens in a new window)","extTargetNoOverride":false,"extNofollow":false,"extNoreferrer":true,"extFollowNoOverride":false,"extClass":"ext","extLabel":"(link is external)","extImgClass":false,"extSubdomains":true,"extExclude":"","extInclude":"","extCssExclude":".no-extlink","extCssInclude":"","extCssExplicit":"#main-content","extAlert":false,"extAlertText":"This link will take you to an external web site. We are not responsible for their content.","extHideIcons":false,"mailtoClass":"mailto","telClass":"","mailtoLabel":"(link sends email)","telLabel":"(link is a phone number)","extUseFontAwesome":false,"extIconPlacement":"append","extFaLinkClasses":"fa fa-external-link","extFaMailtoClasses":"fa fa-envelope-o","extAdditionalLinkClasses":"","extAdditionalMailtoClasses":"","extAdditionalTelClasses":"","extFaTelClasses":"fa fa-phone","whitelistedDomains":[],"extExcludeNoreferrer":""}},"ckeditor5Premium":{"isMediaInstalled":true},"user":{"uid":0,"permissionsHash":"62f0938c33c18a4e765ff4e38208397ae417188eac026d31761fd4c379e25337"}}</script> <script src="/sites/default/files/js/js_PpK_0yxA_qmP8ipvuK4UWtUCCCOOn1l2FSEyXKn9ook.js?scope=footer&delta=0&language=en&theme=cwd_privacy_office&include=eJxliwEKwzAMAz_ULk8yjuNmXk0dYndbfr_CBoUVBJIOKSOtEHaopXxmePhUzaoy4IY6QsjTP5joVSCjc6pqGXX2GCpbPfmdsXCfnbq0-O5blyfSAFsWocuT33H4mkrfG-rtVz8ZeUD9"></script>  <script type="text/javascript"> (function() { var sz = document.createElement('script'); sz.type = 'text/javascript'; sz.async = true; sz.src = '//siteimproveanalytics.com/js/siteanalyze_6120104.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(sz, s); })(); </script>   </body> </html>

CINXE.COM

University Policies | University Privacy