This may involve a complete keystroke log of an entire session. In addition, the director of the facility concerned may authorize limited searching of user files to gather evidence on a suspected violation. On certain systems, users may have the option of encrypting data files. While this may offer good security against unwanted access, the proper use of encryption is the responsibility of the user. If the encryption key is lost, AT cannot recover the data.
Privacy depends on users keeping their account password secure.
This list indicates a number of limitations of user privacy and confidentiality. Notwithstanding these limitations, OIT will make all reasonable efforts to maintain confidentiality of user data. If, by mistake or other cause, an AT staff member reads protected user information, they will not divulge this information except as authorized by the director of the facility concerned or by appropriate legal authorities. Any actual or suspected violation of the rules listed above should be brought to the director of the facility most directly involved. In case of doubt, the report should be made to the AT and OIT Directors.