Responsibilities of the Chief Information Officer

Federal laws

The ECPA amended the Wire Tap Statute to encompass transmissions of electronic data by computer and the law prohibits both the interception of electronic communications and access to stored electronic communications.  Some commentators argue that this  law gives employees of private entities a right to privacy in their e-mail.  Title18 U.S.C. § 2510(15) extends the Act's protection to university-owned telephone, e-mail and Internet systems.  However, there is support for the proposition that employers who own the computer system used by their employees have the right to monitor employees' e-mail.  Employee consent is also a defense to liability under the ECPA intercept provision, and this exception is the more certain of the exceptions to liability under the law.  Thus, employees should either consent to or be put on notice that it is university policy that their e-mail may be intercepted.

The Chief Information Officer is responsible for ensuring compliance with this law. The way in which this is accomplished is by oversight of the CUA Employee Electronic Communications Policy and related Guidelines and Procedures. The Information Assurance Policy is also relevant, along with the Computer Ethics Policy. As specified in those policies, the CIO will consult the General Counsel as needed.

Related Policies

Employee Electronic Communication Policy

Information Assurance Policy

Student Records

updated 8-13-09 by JP to add policies