Summary: UNIVERSITY OF HOUSTON SYSTEM
SECTION: General Administration NUMBER: 01.D.06
AREA: Legal Affairs
SUBJECT: Protection of Confidential Information
August 31, 2007 Page 1 of 2
1. PURPOSE AND SCOPE
It is the policy of the University of Houston System (the "System") to ensure that there
are guidelines, safeguards, and controls in place to effectively manage and protect
confidential information in accordance with applicable laws, regulations, and best
practices. Such confidential information includes, but is not limited to, social security
numbers, educational records as defined by the Family Educational Rights and Privacy
Act ("FERPA"), health care information as defined by the Health Insurance Portability
and Accountability Act ("HIPAA"), and customer information as defined by the Gramm-
Leach-Bliley Act ("GLB Act").
2.1. The General Counsel will serve as the Privacy Officer for the System.
2.2. The Privacy Officer's duties include the issuing of guidelines with regard to the
use of social security numbers, educational records, health care information,
customer information, and other confidential information.