All information system users will be held responsible for adhering to the following approved policies for system data access, use, and security. All individuals who desire access to University data must obtain appropriate management level approval for access, read this DePaul University Policy on Access to and Responsible Use of Data, and sign the Request for Data Access. A Data User is any person, authorized or unauthorized, who has electronic or other access to University data. For purposes of this policy, data use does not include student or employee access to or modification of his or her data for legitimate purposes. They are considered property and may be in any form, including but not limited to printouts, electronic, magnetic or optical storage media, punch cards, including any storage device to capture data or data stored internally in the memory of the computer.
Privacy refers to the right of individuals to control personal information about themselves.
Confidentiality refers to that property or characteristic of information that is kept secret and secure. Internal Non-Sensitive Data is defined as confidential data to which eligible University employees may be granted access without restriction, based on job responsibilities and a legitimate administrative or educational purpose. Internal Sensitive data requires that greater care and precaution be exercised for access and use. A Data Steward is defined as a University employee who has been granted responsibility for managing the designated data resources in her or his functional area. In conjunction with Information Services personnel and the Data Security Administrator, a Data Steward is responsible for data acquisition, maintenance, interpretation and definition, application of business rules, integrity and security, and application of access rules.