home | phase ii | links of interest

Important URLs to Bookmark

Ongoing Compliance Obligations

• Health Insurance Portability and Accountability Act (HIPAA)
  
• Gramm-Leach-Bliley Act (GLBA)
  
• Family Educational Rights and Privacy Act (FERPA)
  
• PA Breach of Personal Information Notification Act [73 P.S. § 2301 et seq]
  
• PA Mental Health Law
• 21 USC Chapter 16 - Drug Abuse Prevention, Treatment, And Rehabilitation
  
• The Privacy Act of 1974 5 U.S.C. § 552a
  
• Confidential Information Protection and Statistical Efficiency Act

PSU

• Trusted Network Specifications
• Security Operations and Services (SOS)

PSU GURU Policies and Guidelines of Interest

• FN07, Credit Card Sales
• AD11 - University Policy on Confidentiality of Student Records

• AD19 - Use of Penn State Identifier and Social Security Number

• AD20, Computer and Network Security
• AD22 - Health Insurance Portability and Accountability Act (HIPAA)

• AD23, Use of Institutional Data
• Trusted Network Specifications
• AD35, University Archives and Records Management
• AD53 - Privacy Statement

• ADG01, Glossary of Computer Data and System Terminology
• ADG02, Computer Facility Security

Other

• HIPAA Security Series
• DATALOSSdb: Data loss statistics
• Privacy Rights Clearinghouse: A chronology of data breaches