1. Use and Protection of Personal Information
The University shall, insofar as is practical, closely delimit the ways in which personal information may be used for the purposes of conducting education, research, medical activities, and other such University endeavors; and shall utilize such information properly and only as necessary to enable effective operation and the provision of relevant services.
The University shall establish appropriate organizational, physical, and technical means so as to enable safe maintenance and management of the personal information that it acquires. Faculty and other employees who are given access to such information shall be subject to appropriate supervision as necessary to maintain secure management of this information.