The institution protects the security, confidentiality, and integrity of its student records.
[Compliance]
Narrative:
The University of Alabama in Huntsville (UAH) in compliance with Principle 3.9.2 because the institution protects the security, confidentiality, and integrity of its student records. Student academic records are maintained in the University's computer-based Student Information System (SIS). The SIS at UAH includes integrated modules for student admissions, student records, and registration. The SIS provides extensive security measures to ensure the completeness and accuracy of data. Students may utilize a web-based interface to their records using a password selected by the student. This interface requires a secured socket layer connection utilizing a 128 bit encryption to minimize the probability of data tampering. The Director of Systems and Operations, Computer and Network Services, is responsible for the security of these records; this protection is under the authority of the Registrar.
Academic and non-academic data stored as physical records are managed in accordance with the Alabama Public Records Act as detailed in the Functional Analysis and Records Disposition Authority document. Academic records are also kept in accordance with the American Association of Collegiate Registrars and Admissions Officers document. The Registrar is responsible for the handling of physical academic records.
Guidelines govern the length of time various student records must be kept; for instance, many academic records, such as student transfer evaluations, are held as permanent records, while a record like a campus parking violation is kept for three years after final disposition. Athletic case files which are created in the course of investigations of alleged infractions of rules are also held as permanent records. Academic records are housed in a vault within the University Center until they are imaged. They are then sent to an off-campus storage facility that is deemed safe from natural disasters and tampering.
Health records, such as those maintained by the Wellness Center or the Counseling Center, are kept in accordance with Health Insurance Portability and Accountability Act of 1996 (HIPAA) guidelines. The staff at the Counseling Center adheres to professional legal and ethical guidelines set forth by the American Psychological Association and Alabama State Law. Records remain confidential and are not released without the student's signature on a written release form. Counselors are mandated, however, to report certain information if they believe there is imminent danger to the student or another individual.
#
Source
Location
1
American Association of Collegiate Registrars and Admissions Officers
