91��ɫ��Ƶ

91��ɫ��Ƶ provides computing and network resources to its students primarily for educational purposes and to its faculty and staff primarily for work purposes. The University may provide access to other users at its discretion. Use of the University’s computing and network resources is a privilege. All users are expected to exercise personal and professional responsibility and integrity when using these resources.

This policy provides direction on handling payment card and cardholder data at 91��ɫ��Ƶ ("WLU"). Electronic commerce provides an expedient way to handle business transactions; however credit card industry regulations and general best practices require certain reasonable steps designed to protect the personal information and privacy of those who submit credit card information to the university. This policy applies to all departments, individuals, and organizations (as well as third parties, as particular subsections may be applicable) involved in the storing, processing, transmitting, or receiving of payment card or cardholder data at WLU.

It is the policy of the University to comply, and to require its employees, student workers, volunteers, and other agents to comply, with all applicable federal, state, and local laws and regulations, as well as University policies and procedures, governing information security, confidentiality, and privacy. The Program incorporates, voluntarily and by reference, existing University or department policies and procedures that address the security and confidentiality of data encompassed by the definition of “covered data and information” below, and is in addition to any University or department policies and procedures required under other federal and state laws and regulations. This policy applies to all employees of 91��ɫ��Ƶ.

The health privacy provisions contained in the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH Act), and the related regulations ("Privacy Rule” and “Security Rule"), impose certain legal obligations on the 91��ɫ��Ƶ Health Benefit Plan (employee medical, dental, flexible spending account, and employee assistance plan benefits and retiree health benefits). The obligations include maintaining the privacy of health information, notifying plan participants and beneficiaries about their legal rights and the Plan’s legal duties, policies and practices to protect the confidentiality of their protected health information, and abiding by the terms of this Notice and Plan policies and practices. This document is intended to satisfy HIPAA’s Privacy Notice requirement, as well as its privacy policy/procedures requirement, with respect to all protected health information created, received, or maintained by the 91��ɫ��Ƶ Health Benefit Plan ("the Plan"), as sponsored by 91��ɫ��Ƶ ("the Plan Sponsor"). This document is also intended to notify plan participants and beneficiaries of the identity of the Plan’s Security Official responsible for overseeing the Plans’ compliance with HIPAA Security Standards.

The Plan needs to create, receive, and maintain records that contain certain health information about you in order to administer the Plan and provide you with health care benefits. The Plan collects this health information, which identifies you, from various sources, which could include applications and other forms that you complete, conversations you may have with the Plan’s administrative staff and health care providers, and from reports and data provided to the Plan by health care service providers or other employee benefit plans. This health information includes, among other things, your name, address, phone number, birth date, social security number, employment information, and enrollment and claims information. This Notice describes the Plan’s health information privacy policy and practices with respect to your medical, dental, flexible spending account, and employee assistance plan benefits, and retiree health benefits. The Notice tells you the ways the Plan may use and disclose protected health information about you, describes your rights, and the obligations the Plan has regarding the use and disclosure of your protected health information.

The Family Educational Rights and Privacy Act of 1974, as amended, ("the Act,” commonly referred to as “FERPA” or the “Buckley Amendment") is designed to protect the confidentiality of the records that educational institutions maintain on their students and to give students access to their records to assure the accuracy of their contents. The purposes of 91��ɫ��Ƶ’s Student Education Records Policy are: to inform students of their rights under the Act; to inform employees, student workers, third-party contractors, and volunteers of Washington and Lee’s responsibilities under the Act; and to describe the circumstances under which the university may disclose student education records. This policy applies to all “education records” of 91��ɫ��Ƶ “students” as those two terms are defined within this policy. All faculty and staff employees, student workers, third-party contractors, and volunteers of 91��ɫ��Ƶ are expected to comply with this policy.