Scribd Logo
Upload

Welcome to Scribd!

  • 139 views

    FTC Safeguards Rule

    Uploaded by

    vcuCommunications
    The FTC Safeguards Rule requires VCU to ensure security of customer information, protect against threats to information security, and prevent harm from unauthorized access to customer records. The rule is governed by the FTC and mandated by the Gramm-Leach-Bliley Act. VCU must eliminate unacceptable risks to safeguard customer information and protect privacy according to FERPA and other state, university, and departmental policies regarding information use, disclosure, retention, and security.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPS, PDF, TXT or read online from Scribd

    FTC Safeguards Rule

    Uploaded by

    vcuCommunications
    139 views7 pages
    The FTC Safeguards Rule requires VCU to ensure security of customer information, protect against threats to information security, and prevent harm from unauthorized access to customer records. The rule is governed by the FTC and mandated by the Gramm-Leach-Bliley Act. VCU must eliminate unacceptable risks to safeguard customer information and protect privacy according to FERPA and other state, university, and departmental policies regarding information use, disclosure, retention, and security.

    Original Description:

    Gramm-Leach-Bliley Act Effective 5/23/2003

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PPS, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The FTC Safeguards Rule requires VCU to ensure security of customer information, protect against threats to information security, and prevent harm from unauthorized access to customer records. The rule is governed by the FTC and mandated by the Gramm-Leach-Bliley Act. VCU must eliminate unacceptable risks to safeguard customer information and protect privacy according to FERPA and other state, university, and departmental policies regarding information use, disclosure, retention, and security.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPS, PDF, TXT or read online from Scribd
    Download as pps, pdf, or txt
    139 views7 pages

    FTC Safeguards Rule

    Uploaded by

    vcuCommunications
    The FTC Safeguards Rule requires VCU to ensure security of customer information, protect against threats to information security, and prevent harm from unauthorized access to customer records. The rule is governed by the FTC and mandated by the Gramm-Leach-Bliley Act. VCU must eliminate unacceptable risks to safeguard customer information and protect privacy according to FERPA and other state, university, and departmental policies regarding information use, disclosure, retention, and security.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPS, PDF, TXT or read online from Scribd
    Download as pps, pdf, or txt
    You are on page 1of 7

    FTC SAFEGUARDS

    RULE
    Gramm-Leach-Bliley Act
    Effective 5/23/2003
    Introduction
     The purpose of the FTC Safeguards Rule is to:
     Ensure the security and confidentiality of customer

    information.
     Customer information is defined as any record

    containing nonpublic personal information such as a


    social security number, whether in paper, electronic,
    or other form, that is handled or maintained by or on
    behalf of VCU or its affiliates.
     Protect against any anticipated threats or hazards to the

    security or integrity of such records.


     Protect against unauthorized access to or use of such

    records or information that could result in substantial


    harm or inconvenience to any customer.
     This Rule is governed by the Federal Trade Commission and
    is required by the Gramm-Leach-Bliley Act that was signed
    into law by President Clinton on November 12, 1999. Go to
    http://www.ftc.gov/privacy/glbact/ for more information on the
    Gramm-Leach-Bliley Act.
    Standards for
    Safeguarding Customer
    Information
     The goal of Virginia Commonwealth University is to
    eliminate unacceptable risks in order to safeguard
    customer information and protect the confidentiality
    and privacy rights of its customers.
    Protected Customer
    Information
     The privacy rule limits the use and disclosure of customer
    information. View the Family Educational Rights and Privacy
    Act (FERPA) at this website:
    http://www.students.vcu.edu/rg/policies/rg7privy.html
     “Use” refers to what is done with the protected information,
    such as nonpublic information, within VCU.
     “Disclosure” refers to what is given out to an external entity
    for use outside of VCU.
     Covered Entities:
     Non directory information such as social security
    number, grades, schedules, GPAs, bank account
    numbers, ID numbers, and academic standing.
    Practical Tips for
    Safeguarding
    Customer

    Information
    Do not leave confidential data unattended or visible by others.
     Shred and never recycle documents containing confidential customer information such as a
    social security number.
     Secure all daily work in locked file cabinets or drawers
     Protect secured areas – lock all doors, and never loan your key.
     Talk quietly when discussing confidential or private information with a customer.
     Avoid the use of names or other identifying information whenever possible.
     Sensitive information should not be sent to remote printers or photocopiers where access is
    uncontrolled. Nor should it be faxed where the physical security of the receiver is unknown.
     Include a confidential statement on your fax transmittal sheet that information sent to the
    incorrect destination be destroyed, and requesting notification to the sender of such errors.
     Do not dispose of documents containing nonpublic information in wastebaskets, or
    recycling bins; instead, shred or otherwise destroy before discarding.
     Sensitive information should never be left on voicemail, or answering machines.
     Avoid using nonpublic information via e-mail.
     Use password-activated screensavers.
    What This
    Means
     VCU should safeguard customers information by adhering to
    the following policies and guidelines:
     Federal Educational Rights and Privacy Act (FERPA) -

    http://www.students.vcu.edu/rg/policies/rg7privy.html
     State and University policies on Records Retention and

    Disposition -
    http://beech.vcu.edu/das/info.nsf/pages/record.htm
     University Information Technology Policies and

    Guidelines - http://www.at.vcu.edu/ovp/policies.html
     VCU Financial Policies -

    http://www.vcu.edu/finance/finpolicies/policy.htm
     State of Virginia Information Technology Policies and

    Guidelines -
    http://www.dhrm.state.va.us/hrpolicy/policy/pol1_75.pdf
     Payroll Services Guidelines and Polices -

    http://www.hr.vcu.edu//payroll/index.htm
    Comments/Questi
    ons
     Please forward any comments or questions to
    the Safeguard Coordinator, Anjour B. Harris, at
    abharris@vcu.edu, or P.O. Box 842520.

    You might also like