Section 910.40  Use, Security and Confidentiality of Data

a)         IBHE and entities accessing IBHE data shall comply with all applicable federal and State laws that regulate the privacy and use of, and access to, shared data. (See, e.g., the Family Educational Rights and Privacy Act; the Illinois School Student Records Act [105 ILCS 10]; the Data Processing Confidentiality Act [30 ILCS 585]; the Freedom of Information Act [5 ILCS 140]; section 487 of the Higher Education Act of 1965, as amended (20 USC 1094).)

b)         IBHE data is confidential and shall not be used or shared for any purpose other than that directly related to internal operations of IBHE or stipulated in an IBHE shared data agreement with another entity.  Entities accessing IBHE data shall be responsible for meeting IBHE shared data agreement security procedures and protocols, pursuant to Section 910.50, to protect the integrity of the data accessed, stored, transmitted or received.