Policy 1C.1 - Data Practices and Retention

Part 1: Records Retention

Per Minnesota Statute Chapter 13, 探花视频 (LSC) will ensure accurate and secure records collection, storage, and disposal. It is the College鈥檚 commitment to protect the confidentiality and ensure proper storage of data in accordance with Family Educational Rights and Privacy Act (FERPA), the Minnesota Data Practices Act (MGDPA), Minnesota Management and Budget (MMB) requirements, Minnesota Historical Society approval, and other applicable laws.

Part 2: Definitions

Subpart A: Data Practices Compliance Official.聽Per MN Stat. Section 13.05, LSC鈥檚 President designates the Vice President of Academic & Student Affairs to be the College鈥檚 Data Practices Compliance Official. This individual receives and responds to data practice inquiries and concerns, to include any problems in obtaining access to data in LSC鈥檚 possession.

Subpart B: Directory Information.聽Per MN Stat. Section 13.03 and FERPA 34 CFR 搂 99.3, directory information refers to information contained in a student鈥檚 education record that would not generally, if disclosed, be considered harmful or an invasion.

Subpart C: Educational Record.聽A record directly related to a student and maintained by LSC.

Subpart D: Health Insurance Portability and Accountability Act (HIPAA).聽HIPAA is the federal law that established standards on privacy and security of health information, as well as standards for electronic data interchange of health information.

Subpart E: Private Data.聽Individually identifiable data about students and applicants in any tangible form 鈥� wherever located 鈥� is private data. All student data not characterized as directory information is considered the student鈥檚 private data.

Subpart F: Public Data.聽All government data collected, created, received, maintained, or disseminated by a government entity shall be public unless classified by statute, or temporary classification pursuant to MN Stat. Section 13.06, or federal law, as nonpublic or protected nonpublic, or with respect to data on individuals, as private or confidential.

Subpart G: Responsible Individual.聽An LSC employee charged with maintenance, management, and security of data on particular persons, or in some instances; a person or company with whom the College has contracted, a person serving on the Minnesota State Board of Trustees, or in the Office of Chancellor, or a person assisting another school official in performing his or her tasks. Only individuals with legitimate educational or personnel interest will have access to data on students or employees.

Subpart H: Student.聽An individual who is currently enrolled at LSC. For the purposes of this policy, those seeking enrollment (applicants) and former students (alumni) are included in this definition. All students have the same educational data rights, irrespective of age.

Part 3: Inquiries and Requests for Information

Per LSC Policy 2.0, notice of FERPA policy will be provided to enrolled students at least annually by email. Alternative formats or translations may be accessed through the Office of the Vice President of Academic and Student Affairs.

For further questions concerning your rights, please consult one of the following responsible individuals:

Data Practices Compliance Officer: Vice President of Academic & Student Affairs
Employee Data Privacy Designee: Director of Human Resources
Student Data Privacy Designee: Registrar
Data Security / Breach Designee: Director of Information Technology

Subpart A: Law Enforcement Investigations

Under the MGDPA, a Tennessen warning shall not apply if an employee is asked to supply investigative data pursuant to MN Stat. Section 13.82 subdivision 7, to a law enforcement officer.

Subpart B: Student Data Emergency Exception

Under FERPA regulation 34 CFR 搂 99.3.6, LSC can share student records in connection with an emergency, if necessary to protect the health and safety of the student or other individuals. The emergency exception must be recorded in the student鈥檚 records.

Subpart C: HIPAA

Health records possessed by LSC, as part of a student鈥檚 record, are educational data subject to FERPA. Student health records are not subject to the HIPAA Privacy Rule unless the records are maintained by a covered component or operation as defined by HIPAA regulations. Health records maintained by admissions, the student health center, Student Accessibility Services, and for academic purposes are not subject to the HIPAA Privacy Rule

Community clinics operated by the College are subject to the HIPAA Privacy Rule and maintain privacy practice procedures accordingly.

Part 4: Records Retention Schedule

The College maintains processes, identifies responsible authorities, and keeps retention schedules to ensure the integrity, preservation, destruction, and archiving of information in accordance with MMB schedules, FERPA requirements, the Minnesota Historical Society, and other applicable laws.

Part 5: Restrictions on Record Destruction

All records, created, and maintained by the College, excluding forms of intellectual property, are government data subject to the MGDPA. Government data is not the personal property of employees. Such data is subject to applicable laws, institutional policy, and procedures.

History

Date Implemented:聽May 2006

Date Updated:聽March 3, 2017