Law / United States / New Hampshire

Higher education commission standards for degree-granting institutions: student record security and data privacy policies

Hedc 405.06(d)-(e); Hedc 405.07

In force since .

A sensitive categories rule binding private bodies.

Obligation class
Security, Governance
Audit expectation
none

What it requires

  • If you are a degree-granting institution with a physical presence in New Hampshire under the higher education commission's jurisdiction, develop a student record system and secure it by storing physical records in secure, fire-resistant cabinets, securing electronic records so as to prevent loss, and routinely maintaining a secure backup of physical and electronic records (Hedc 405.06(d) and (e)).
  • Include in your written plan a description of policies and procedures to ensure the integrity and security of data, and the privacy of individuals (Hedc 405.07).

These lines are LexLint's reading of the law's text.

What record it asks for

Logging duty

The cited provisions name no log of access to or use of personal data and no audit of a kept record, and state no territorial reach, so no hook is taken.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Under Hedc 405.06 an institution supports its students by developing a student record system and securing it by storing physical records in secure, fire-resistant cabinets, securing electronic records so as to prevent loss, and routinely maintaining a secure backup of physical and electronic records. Under Hedc 405.07 the institution's written plan must describe policies and procedures to ensure the integrity and security of data, and the privacy of individuals.

The commission's degree-granting rules do not reach the institutions of the university system of New Hampshire, the community college system of New Hampshire, or an in-state institution in continuous operation since before 1775.

When LexLint raises it

When your app profile says your app serves colleges and universities.

Back to the example  ·  Lint your app

Page updated .