In its recently published White Paper, the Association for Managing and Using Information Resources in Higher Education recommended that all University representatives concerned with student information technology play a part in the review, evaluation, and revision of policies on privacy and access to information in a networked environment. According to the Association, this evaluation should take into account eight principles of fair student information practice. That information should be deleted when no longer needed. The accuracy of information contained in student records must be assured. Integrity is reasonable assurance that information cannot be modified without authorization.
Accountability is the ability to connect security related events to the originator.
The University is responsible not only to notify its students but also to educate its own faculty and staff concerning the privacy rights of its students and the potential implication of use or misuse of personal student information. The Association recommendations lay a good foundation for decision-making by University officials as they confront the challenges of maintaining legally mandated privacy interests in the new information age.