Relevant Data Protection Laws

Federal legislation

HIPAA - Health Information Portability and Accountability Act

HIPAA protects the privacy of individually identifiable health information.
Read more about the HIPAA

FERPA - Family Educational Rights and Privacy Act

FERPA is a Federal law that protects the privacy of student education records. The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education.
Read more about the FERPA

ECPA - Electronic Communication Privacy Act

The Electronic Communications Privacy Act (ECPA) sets out the provisions for access, use, disclosure, interception and privacy protections of electronic communications.
Read more about the ECPA

NETA - No Electronic Theft Act

The No Electronic Theft Act (NET Act), provides for criminal prosecution of individuals who engage in copyright infringement under certain circumstances, even when there is no monetary profit or commercial benefit from the infringement.
Read more about the NETA

Wiretap Act

The Wiretap Act broadly prohibits the intentional interception, use, or disclosure of wire and electronic communications unless a statutory exception applies. In general, these prohibitions bars unauthorized third parties (including the government) from wiretapping telephones and installing electronic "sniffers" that read Internet traffic.
Read more about the Wiretap Act

USA Patriot Act

The purpose of the USA PATRIOT Act is to deter and punish terrorist acts in the United States and around the world and to enhance law enforcement investigatory tools.
Read more about the Patriot Act

Indiana state legislation

SSN Disclosure Law

The SSN law prohibits IU or its employees from disclosing "orally, on paper, or electronically" an individual's SSN, except under certain circumstances.
Read more about the SSN Disclosure Law

Data Disposal Law

The data disposal law requires that we "dispose" of the "personal information" of a "customer" in a secure manner.
Read more about the Data Disposal Law

Data Breach Notification Law

This law requires that IU give notice "without unreasonable delay" to persons whose unencrypted personal information "was or is reasonably believed to have been acquired by an unauthorized third person" due to an electronic systems security breach.
Read more about the Data Breach Notification Law

Consumer Report Security Freeze Law

Indiana law allows you, if your principal residence is within the state of Indiana, to place a "security freeze" on your consumer credit report, including your credit score.
Read more about the Consumer Report Security Freeze Law