89 SPEC Kit 360: Learning Analytics PENNSYLVANIA STATE UNIVERSITY AD53 Privacy Policy https://policy.psu.edu/policies/ad53 individual the provision of health care to an individual or the past, present or future payment for the provision of health care to an individual. SCOPE: This policy is applicable to all members of The Pennsylvania State University community and visitors to the University, including but not limited to students, scholars, faculty, lecturers/instructors, staff, third-party vendors, and others with access to the University's campus and University PII. This policy also applies to all locations and operations of the University, except for Penn State Health and The Pennsylvania College of Technology, which will follow separate policies. POLICY: I. Information Privacy a. General Privacy The University shall limit the collection, use, disclosure or storage of PII to that which reasonably serves the University's academic, research, or administrative functions, or other legally required purposes. Such collection, use, disclosure and storage shall comply with applicable Federal and state laws and regulations, and University policies, guidelines and standards. b. Privacy Principles This Policy is supplemented by Penn State’s Privacy Principles that are modeled after the “Privacy by Design” approach and designed to safeguard individuals’ privacy and personal information, maintained by the University, consistent across the Penn State community. Penn State’s Privacy Principles can be located at https://psu.box.com /v/privacy-principles. (https://psu.box.com/v/privacy-principles) c. Information That May Be Disclosed to Third Parties Legal Requirements: The University may release records in response to a lawful subpoena, warrant, or court order or where such records could be required or authorized by law to be produced or lawfully requested for any other reason, including disclosure to a government agency. Authorized Persons: Records may be disclosed to University officials, and authorized individuals performing work for the University who require the information for the performance of their duties. Protection of University Interests: The University may disclose information contained in records to protect its legal interest when those records may be related to the actions of an individual that the University reasonably believes may violate or have violated his/her conditions of employment or threaten injury to people or property. Collective Bargaining Agreements: Information may be disclosed as required under the terms of a collective bargaining agreement. Emergencies: Information may be disclosed if, in the judgment of the designated custodian of such records, disclosure is necessary to protect the health, safety or property of any person. d. Expectation of Privacy In the interest of promoting academic freedom and an open, collegial atmosphere, the University recognizes the reasonable privacy expectations of its employees, affiliates, and students in relation to their personal information, including papers, confidential records, and communications by mail, telephone, and other electronic means, subject only to applicable state and federal laws and University policies and regulations, including the policy set forth herein. The University will not monitor such information without cause except as required by law or permitted by University Policy. e. Applicable Guidelines In invoking the exception clause (“subject only to applicable state and federal laws and University polices and