2.1 Department of Health and Human Services, 45 CFR Part 46.112

2.2. Department of Education, 34 CFR Part 99, Federal Family Education Rights and Privacy Act

2.3 Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules

2.4 Utah Code Ann. 63-2-101 et seq., Government Records Access and Management Act (GRAMA)

2.5 UVU Policy #136 Intellectual Property

2.6 UVU Policy #138 Institutional Review Board (IRB)

2.7 UVU Policy #445 Institutional Data Management and Access

2.8 UVU Policy #449 Private Sensitive Information

2.9 UVU Policy #450 Processing and Control of Distributed Administrative Data

3.1 Constituents: Individuals directly associated with UVU (for example, students, former students, donors, employees, alumni).

3.2 Branded data: Institutional data that has been obtained using institutional resources for use by the University and its units in reports, marketing materials, and so forth.

3.3 Data collection: Collecting data through a variety of means, such as surveys, interviews, and focus groups, etc.

3.4 Institutional data: Data that is acquired or maintained by university employees in the performance of official administrative duties and is relevant to planning, managing, operating, assessing, or auditing a major administrative function of the University. The following are examples of data that would not be considered institutional data:

3.4.1 Personnel records;

3.4.2 Personal medical, psychiatric, or psychological data for both employees and patients seen at University clinics;

3.4.3 Information that is legally restricted under federal or state law;

3.4.4 Notes and records that are the personal property of individuals in the University community;

3.4.5 Instructional materials including tests, examinations, exercises, classroom assignments, and surveys administered in the faculty member’s own classroom;

3.4.6 Research notes, materials, and data collected by faculty or students for research projects unless subject to the provisions of UVU Policy #136 Intellectual Property.

3.5 Researcher: For the purposes of this policy, an individual, group, or organization engaged in data collection from or about the University and/or its constituents. This excludes those involved in institutional data collection for the performance of official university duties (see 3.3).