Taft's policy is to protect and safeguard the confidential nature of personal, non-public information that the school may obtain concerning its employees, students, alumni and other individuals. This information includes, for example, social security numbers, driver's license numbers, state identification cards, account numbers, credit or debit numbers, passport numbers, alien registration numbers and health insurance identification numbers ("Personal Information").
Taft only will disclose Personal Information on a strict business need-to-know basis and to the extent required or permitted by law. Taft will use commercially reasonable safeguards to prevent unauthorized access to and disclosure of Personal Information. Although security cannot be guaranteed, Taft will maintain physical, electronic and procedural safeguards to minimize the risk of unauthorized access or disclosure of such information. For example, Taft will:
(i) Limit the collection and access of Personal Information strictly to those individuals who need to know this information;
(ii) Prohibit the printing or publicizing of any Personal Information;
(iii) Train and screen employees with access to any Personal Information; and
(iv) Encrypt any Personal Information stored on Taft computers.
Taft will destroy, erase, shred or make unreadable its business records that contain Personal Information prior to disposing such information. Taft may dispose of Personal Information by contracting with a person or firm engaged in the business of disposing of records that contain confidential information.