They have established the general boundaries within which ACT Security Administration may provide access to core data. Each department must decide which employees will be granted access to core data. Access should be provided only to individuals who need it. Departments should evaluate access requirements within their department by looking at job functions. Another significant criterion should be a department's ability to maintain the confidentiality of information.
Confidentiality goes beyond legality in many cases.
For example, even though university salary ranges are public information, most individuals would prefer that such information be treated with respect. As a general rule, departments should provide access to information only when it is needed to perform a specific job. There are some special considerations when providing DSE and Darwin access. The intent of the DSE and Darwin is to distribute information in bulk, and in an easy to use electronic form. The possibility of abuse, both intentional and unintentional, is significantly increased with DSE and Darwin access.