Since the spring about 20 states have passed laws that require residents to be notified when companies leak their personal information online. And while the laws are often intended to crack down on commercial data breaches, they’ll also apply to colleges, said Tracy Mitrano, director of information-technology policy at Cornell University, at this year’s Educause conference.
Ms. Mitrano led a wide-ranging roundtable on security and privacy issues that included discussion of the new data-breach laws. The laws, participants agreed, will force computing officials and general counsels to answer some tricky questions, like what constitutes “personal information� and what kind of encrypted data is exempt from the notification requirement.
“We’re asking anybody who’s going to breach our data,â€? joked Ms. Mitrano, “to do it before December 8thâ€?—when New York’s tough notification law, which some experts expect to set a new national standard, goes into effect.



Developing online and blended learning programs requires research and collaboration. Learn how top technology companies are partnering with campuses across the country to advance online learning as it becomes an increasingly important aspect of higher education.