The Scales of Justice

Balancing Policy and Law Against Expectations in Real-Life Computer Abuse Cases

Panelists

• Patti Orr: HIPAA and IT: A Prescription for Partnership and Leadership!– Director of User Services.

Wellesley College

• Merri Beth Lavagnino: Anonymity Doesn’t Buy a “Get Out of Jail Free” Card for Hate Mail Sender– Deputy Information Technology Policy Officer

Indiana University

• Jenny Mehmedovic: Border Crossing: Working with the Feds to Prevent International Identity Theft– Coordinator of IT Policy & Planning

University of Kansas

Law, Policy and Partnership

• Law– Health Insurance Portability Accountability Act– Harassment and Intimidation– Illegal Immigration Reform and Immigrant

Responsibility Act of 1996• USA-Patriot Act • SEVIS• Family Education Rights Privacy Act

– Fraud and Abuse of Computer Act

Policy

• Computer Users' Privileges and Responsibilities Policy – http://www.indiana.edu/~uitspubs/iu001/iu001.

pdf

• IT Security Policy– www.security.ku.edu

• Incident Response Procedures• Law Enforcement Response Procedures• Crisis Communications Policy/Procedures

Partnerships

• Country Police and Prosecutor • Dean of Students• University Police• University Counsel• University Policy Office• University Relations• IT Security• Health Services• EDUCAUSE sites!

Managing Expectations

• Victims: Retribution and Justice– Information about policy process and

discipline– Prosecutor – University – Victim interactions

• Balancing legal requirements and staff compliance…for “customers/clients/users”

• Balancing victims, law enforcement and public relations

Questions?