Nadine SternThe College of New Jersey

FERPA – new rules in 2009◦ Directory information issues –personally

identifiable information –such as net-id◦ How to deal with outsourced data – TCNJ found the

need to develop a template: SERVICE PROVIDER REQUIREMENTS

HEOA Act ◦ Financial Aid regulations PLUS◦ P2P compliance ◦ Text books ◦ Public Safety and reporting◦ All college areas affected

◦U.S. Census data collection

Gramm-Leach Bliley: protection of consumer information –applied broadly to Colleges

FTC: Red Flag Rule – identification of identity theft

HIPAA

Yellow Ribbon Program

PCI Compliance: credit card processing

Business Continuity Planning◦Disaster recovery

Critical Incident Planning Data/record retention E-discovery Information Security Compliance

◦Information/security breach notification requirements

Identity Theft prevention and reporting

Reaction to Spellings report Student Learning Outcomes VSA – Voluntary System of Accountability

◦ CLA : Collegiate Learning Assessment◦ Collegiate Assessment of Academic Proficiency◦ MAP: Measure of Academic Proficiency◦ NSSE: National Survey of Student Engagement◦ FSSE: Faculty Survey of Student Engagement◦ BCSSE: Beginning College Survey of Student

Engagement

Working Relationship with General Counsel Compliance Ethics – vendor relations

Financial Aid regulations NACUA –National Association of College and

University Attorneys

General Counsel – taking central role in compliance and regulatory issues

Separating IT responsibility from general college responsibilities

Enhanced emphasis on compliance and accountability