Regulatory Pressures, Accountability and Compliance

1. Regulatory Pressures, Accountability and Compliance Nadine Stern The College of New Jersey

2. Laws and regulatory mandates • FERPA – new rules in 2009 • Directory information issues –personally identifiable information –such as net-id • How to deal with outsourced data – TCNJ found the need to develop a template: SERVICE PROVIDER REQUIREMENTS • HEOA Act • Financial Aid regulations PLUS • P2P compliance • Text books • Public Safety and reporting • All college areas affected • U.S. Census data collection

3. Laws and regulatory mandates • Gramm-Leach Bliley: protection of consumer information –applied broadly to Colleges • FTC: Red Flag Rule – identification of identity theft • HIPAA • Yellow Ribbon Program • PCI Compliance: credit card processing

4. Protecting Institutional Resources • Business Continuity Planning • Disaster recovery • Critical Incident Planning • Data/record retention • E-discovery • Information Security Compliance • Information/security breach notification requirements • Identity Theft prevention and reporting

5. Accountability Measures • Reaction to Spellings report • Student Learning Outcomes • VSA – Voluntary System of Accountability • CLA : Collegiate Learning Assessment • Collegiate Assessment of Academic Proficiency • MAP: Measure of Academic Proficiency • NSSE: National Survey of Student Engagement • FSSE: Faculty Survey of Student Engagement • BCSSE: Beginning College Survey of Student Engagement

6. Role of College Attorneys • Working Relationship with General Counsel • Compliance • Ethics – vendor relations • Financial Aid regulations • NACUA –National Association of College and University Attorneys

7. TCNJ • General Counsel – taking central role in compliance and regulatory issues • Separating IT responsibility from general college responsibilities • Enhanced emphasis on compliance and accountability