{"id":3158,"date":"2026-04-22T21:40:35","date_gmt":"2026-04-22T21:40:35","guid":{"rendered":"https:\/\/www.tarleton.edu\/technology\/?page_id=3158"},"modified":"2026-04-22T21:41:33","modified_gmt":"2026-04-22T21:41:33","slug":"tarleton-oits-privacy-standard","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/technology\/tarleton-oits-privacy-standard\/","title":{"rendered":"Tarleton OITS Privacy Standard"},"content":{"rendered":"\n
\n
\n

Tarleton Office of Innovative Technology Solutions (OITS)
Privacy Standard<\/h1>\n\n\n\n

Effective: February 11, 2020<\/p>\n\n\n\n

Revised:  April 22, 2026 <\/p>\n<\/div>\n\n\n\n

\n
\"The<\/figure>\n<\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\n
\n\n\n\n
<\/div>\n\n\n\n

Procedure Summary<\/strong> <\/h2>\n\n\n\n

Privacy policies are mechanisms used to establish the responsibilities and limits for system administrators and users in providing privacy in university information resources. Tarleton State University\u2019s (Tarleton or university) has the right to examine information on information resources that are under the control or custody of the university. The general right to privacy is extended to the electronic environment to the extent possible; however, there should be no expectation of privacy beyond that which is expressly provided by applicable privacy laws. Privacy is limited by the Texas Public Information Act<\/a>, administrative review, computer system administration, audits, and as it relates to other Tarleton-wide privacy policies.  <\/p>\n\n\n\n

Tarleton information resources are strategic assets which, as property of the State of Texas, must be managed as valuable state resources in accordance with Texas Government Code Chapter 2054<\/a>. This standard applies to electronic information created, sent, received, or stored on information resources owned, leased, administered, or otherwise under the custody and control of Tarleton.  <\/p>\n\n\n\n

\n

The purpose of this standard is to provide a set of measures that will mitigate information security risks associated with privacy issues. The assessment of potential risks and the application of appropriate mitigation measures will be determined by the information resource owner or their designee. In accordance with Texas Administrative Code (TAC) Chapter 202 \u2010 Information Security Standards<\/a>, each department and\/or resource owner may elect not to implement some or all of the risk mitigation measures provided in this standard based on information security risk management decisions and business functions. Such risk management decisions must be documented and reported to the designated information security officer. This standard applies to all individuals, users, and\/or administrators of Tarleton information resources.<\/p>\n\n\n\n

Please see the <\/a>Tarleton Security Controls Catalog, specifically PT-5: Privacy Notice<\/a>, for additional information and requirements.<\/p>\n<\/div>\n\n\n\n

<\/div>\n\n\n\n

Procedures and Responsibilities<\/strong> <\/h2>\n\n\n\n