(D100) Access to Institutional Data

Policy                                                                                                

University data must be secured against unauthorized access, creation, modification or destruction to ensure its accuracy, integrity and availability. The value of SUNY Polytechnic Institute data is increased through its appropriate use; its value is diminished through misuse, misinterpretation, unnecessary restrictions to access and/or failure to maintain data quality.

SUNY Polytechnic Institute’s Information Technology ("IT") department, is committed to minimizing vulnerabilities that may result from compromised operating system integrity or application security problems, as well as protecting against the unauthorized disclosure or misuse of any information stored on any device connected to SUNY Polytechnic Institute’s network infrastructure. To ensure the continued integrity of its information technology resources, SUNY Polytechnic Institute may audit, inspect and/or monitor them, at any time.

Data Requests

Access to SUNY Polytechnic Institute’s data is governed by SUNY Polytechnic Institute policy as well as state and federal law. Requests for information from any source shall be referred as follows:

• Freedom of Information Law:
  https://sunypoly.edu/public-affairs/foil-request/

State University of New York Policies

• SUNY Policies & Procedures: Use of Facilities by Non-Commercial Organizations
• SUNY Administrative Policy Item 007.1: State University Campuses or Facilities: Use of Computer Equipment or Services by Non-Affiliated Institutions and Organization
• SUNY Administrative Policy Item 008: University Policy on the Use of University: Facilities by Non-Commercial Organizations: Attachment A
• NYS Office for Technology: Technology Policy 97-1 Information Security Policy, Technology Policy 96-19 - Data Sharing Among Agencies

State and Federal Law

• 15 USC § 6801: Gramm-Leach-Bliley Act
• 17 USC § 101: Copyright Act
• 17 USC § 512: Digital Millennium Copyright Act
• 18 USC § 1030: Computer Fraud & Abuse Act
• 18 USC § 1302: Crimes (e-mail fraud)
• 18 USC § 2252: Crimes (exploitation of minors)
• 18 USC § 2501: Electronic Communications Privacy Act
• 20 USC § 1232g: Family Educational Rights and Privacy Act
• 42 USC § 1320a: Health Insurance Portability and Accountability Act
• 42 USC § 2000e: Civil Rights Act
• 44 USC § 2901: Electronic Records Management Part 1234.28
• NY Penal Code §§ 156, 170
• NY Executive Law § 296
• NY Public Officers Law §§ 84, 91