Complaint Challenges Univ. of Hawaii Email Partnership Wth Google 172
An anonymous reader writes "A recent move by the University of Hawaii forcing all students and faculty to migrate their independent university email accounts to Google has raised serious questions, prompting one student to file a complaint with the U.S. Department of Education, with senior faculty questioning both the implementation and scope of this partnership." One of the stranger notes: a clause, defended as standard, naming Google a "school official" of the university.
Re:My old Uni did this. (Score:5, Informative)
HIPPA does not require that data be passed in encrypted form. It only requires that reasonable effort be made secure it. However, that can be patient data can be transmitted via internal email because it's all Exchange and therefore encrypted over the wire, then in most cases, HIPPA is satisfied.
Email Encryption still has long way to go before it's completely transparent to user.
Re:Sounds like shilling (Score:1, Informative)
Considering this "kid" is 37 years old, a former US Marine, a former superintendent for federal contracting projects, and is quite well versed in privacy laws, specifically in the Code of Federal Regulations section 34 part 99 that defines both who can be a "school official" and how student/faculty data is to be handeld, I think your ad-hom attempt at an argument says alot more about you than anyone else. I can stand on the FTC's investigations into Google bypassing user privacy settings for Safari browsers, and Google's admitted illegal data retention and access of wifi-servers, emails, passwords, and hard drive contents while they were out doing Street View. What do you got?
http://www.nytimes.com/2012/04/29/technology/google-engineer-told-others-of-data-collection-fcc-report-reveals.html?_r=2
http://news.cnet.com/8301-1023_3-57414945-93/google-may-face-fine-over-safari-privacy-bypass/
It's not good to show up to a battle of wits unarmed my friend.
Re:"School Official" is not strange, but CRITICAL. (Score:4, Informative)
Where I work we are a service provider for court public records, and are legally an agent of the court for exactly the same reasons. It allows any lawsuits or what have you to be directed to the court as opposed to us. If the court screws up, and makes some information public that shouldn't we do our best to correct the issue, but in the end it's the court's fault and not our own. We even have to be careful in how much help we give them in setting up what data they show, we can't direct them at all or it could make us liable for their bad choices. We can tell them what the majority of our other courts do in similar situations, but even that is a stretch.
Re:Sounds like shilling (Score:0, Informative)
From his first link:
"Eventually, it [Google] was forced to reveal that the information it had collected could include the full text of e-mails, sites visited and other data. "
That's not cloud data or network traffic analysis. That's information that resides in temporary folders on your hard drive.