Campus Adopts Interim Web Privacy Statement
by Bob Ono, Security Coordinator
 
Information and Educational Technology, Public Communications, and Campus Counsel have developed a draft data privacy and security statement for campus Internet Web sites.

The Challenge
Providing e-commerce services raises new concerns about the proper handling of sensitive and confidential customer data, and the opportunities for credit card fraud. As a result, major credit card companies, have defined security requirements to protect credit cardholder information. On May 15, Visa International notified UC Davis of a new credit card regulation requiring the campus to post a consumer data privacy and security statement on all Web sites accepting Visa. Visa also raised the level of the challenge by requiring UC Davis compliance by June 1, two weeks later.

Despite little advance notice of this impending Visa regulation, the campus was actually well prepared to respond to it. Information and Educational Technology, Public Communications, and Campus Counsel had developed a draft data privacy and security statement for campus Internet web sites. The intention is to incorporate this statement into a future campus policy for Internet web publications.

Under campus directive 01-088, campus units hosting Internet credit card transactions are required to post the interim privacy and security statement on their e-commerce Web sites, review their Internet service offerings for compliance with the statement, and, as determined by each unit, implement any remedial action. This approach permits the campus to continue with plans to develop a formal Internet Web publication policy that addresses consumer privacy and security issues while also demonstrating a "good faith" effort to meet existing credit card program requirements. The specific language of the interim privacy and security statement was included within the directive.

If you have any questions on the directive for posting of an interim privacy and security statement on your e-commerce web site, please contact Bob Ono, the campus IT Security Guidelines Coordinator at raono@ucdavis.edu.


 
 Other Resources

 Computer and Network Security

Campus Directive 01-088

 

Last modified: