Information Management

• Policy

  Access to Electronic Information Policy

  Responsible Office(s): Office of the Vice President Information Services and Technology

  Last Modified: 06/01/2017
• Resource

  Additional Guidance on Data Protection Standards

  Responsible Office(s): Information Security
• Report

  Boston University AI Task Force Report April 2024

  Responsible Office(s): Office of the University Provost
• Procedure

  Boston University Minimum Web Accessibility Standards

  Responsible Office(s): Information Services and Technology
• Policy

  Broadcast Email Policy

  Responsible Office(s): Information Services and Technology
• Guide

  BU Desktop Asset Management Policy Guide

  Responsible Office(s): Information Services and Technology
• Procedure

  BU Google Apps Acceptable Use and Data Security

  Responsible Office(s): Information Security | Information Services and Technology
• Procedure

  BU OneDrive Security Guide

  Responsible Office(s): Information Security | Information Services and Technology
• Procedure

  Conclusion of Automatic Preservation of Zoom Class Session Recordings by IS&T

  Responsible Office(s): Office of the University Provost
• Policy

  Cyber Incident Response Policy

  Responsible Office(s): Office of the Vice President Information Services and Technology
• Guidelines

  Destruction of Individual Files on Reusable Media (1.2.D.2 – Data Protection Standards Guidance)
• Guidelines

  Destruction of Paper Records and Non-Erasable Media -CD-ROMs, DVDs (1.2.D.1) (Data Protection Standards Guidance)
• Policy

  Digital Privacy Statement

  Responsible Office(s): Information Services and Technology

  Last Modified: 08/03/2018
• Policy

  Disclaimer for Student and Personal Websites

  Responsible Office(s): Information Services and Technology
• Guidelines

  Guidelines for Authorship

  Responsible Office(s): Office of Research | Research Compliance
• Policy

  HIPAA Health Care Providers Policies Appendix A: Contacts

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 01/19/2024
• Guide

  HIPAA Information for Charles River Campus Researchers

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans Manual – Privacy and Security of Protected Health Information for BU Health Plans

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/11/2025
• Policy

  HIPAA Policies for BU Health Plans: Appendix A, Contacts

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Introduction, HIPAA and the Boston University Health Plans

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 1, Basics

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 10, Definitions

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 2: Individual Responsibilities for Safeguarding PHI

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 3, Routine Use and Disclosure of PHI

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 4, Non-Routine Uses and Disclosures of PHI without Authorization; Prohibited Uses

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 5, Authorizations

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 6, Individuals’ Rights Under HIPAA

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 7, Breaches

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/11/2025
• Policy

  HIPAA Policies for BU Health Plans: Policy 8, Security Policy

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU HIPAA Components: Policy 1, HIPAA Basics

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 12/11/2025
• Policy

  HIPAA Policies for BU HIPAA Components: Policy 8, HIPAA Security Program

  Responsible Office(s): Information Security

  Last Modified: 12/18/2025
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Introduction – HIPAA at Boston University

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 10, Documentation and Retention

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/11/2025
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 11, Exceptions

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 12, Definitions

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 2, Individual Responsibilities for Safeguarding PHI

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 09/20/2024
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 3 – Using PHI in Treatment, for Payment and for Health Care Operations; Business Associates

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/26/2024
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 4, Uses Required or Permitted by Law; Prohibited Uses of PHI

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 5, Situations in which Authorizations and Attestations are Necessary

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 12/10/2024
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 6, Individuals’ Rights under HIPAA

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/30/2026
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 7, Breaches

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/11/2025
• Policy

  HIPAA Policy Manual – Privacy and Security of Protected Health Information for BU HIPAA Components

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 12/11/2025
• Policy

  Information Security Policy

  Responsible Office(s): Office of the Vice President Information Services and Technology

  Last Modified: 04/12/2023
• Procedure

  Learning Management System Policies

  Responsible Office(s): Information Services and Technology
• Policy

  Network Security Monitoring Policy

  Responsible Office(s): Office of the Vice President Information Services and Technology

  Last Modified: 01/12/2018
• Procedure

  Office 365/SharePoint Online Security Policy

  Responsible Office(s): Information Security | Information Services and Technology
• Policy

  Open Access Policy

  Responsible Office(s): Office of Research
• Guidelines

  PCI Data Security Standards (for accepting credit cards) (5.2.3)

  Responsible Office(s): Cashier
• Guidelines

  Physically Destroying Reusable Storage Devices (1.2.D.4 – Data Protection Standards Guidance)
• Procedure

  Policy Approval Process

  Responsible Office(s): Compliance Services | Office of the University Provost
• Policy

  Record Retention Policy

  Responsible Office(s): Office of the Controller

  Last Modified: 07/13/2023
• Procedure

  Record Retention Table

  Responsible Office(s): Office of the Controller
• Instructions and Forms

  Releases for Photos and Videos

  Responsible Office(s): Office of the General Counsel
• Policy

  Safeguarding Information – Gramm-Leach-Bliley Act (GLBA)

  Responsible Office(s): Office of the Controller
• Policy

  Scientific Research Data Policy

  Responsible Office(s): Office of Research
• Guidelines

  Securely Erasing Entire Reusable Storage Devices (1.2.D.3 – Data Protection Standards Guidance)
• Guidelines

  Social Media Guidelines

  Responsible Office(s): Information Services and Technology
• Policy

  Universal Identity Theft Policy

  Responsible Office(s): Office of the Controller
• Guidelines

  Zoom Cloud Recording

  Responsible Office(s): Information Services and Technology

Acceptable Use

• Policy

  Acceptable Use of Computing Services Policy

  Responsible Office(s): Office of the Vice President Information Services and Technology
• Policy

  Conditions of Use and Policy on Computing Ethics

  Responsible Office(s): Office of the Vice President Information Services and Technology
• Procedure

  Copyright Violation Process
• Procedure

  Digital Millennium Copyright Act Procedures

  Responsible Office(s): Information Security
• Policy

  Family Educational Rights and Privacy Act (FERPA) Policy

  Responsible Office(s): Office of the University Provost | Registrar
• Disclaimer

  FERPA Disclosure

  Responsible Office(s): Registrar
• Policy

  Website Policy

  Responsible Office(s): Information Services and Technology

AI

• Guidelines

  Generative AI Guidelines for BU Faculty & Staff
• Guidelines

  Generative AI Guidelines for Classroom Use
• Resource

  TerrierGPT TechWeb Resource Information and Best Practices

BU Brand

• Guidelines

  BU Brand Guidelines

  Responsible Office(s): Office of the Vice President Marketing and Creative Services
• Guidelines

  BU Brand Guidelines – Communication Material

  Responsible Office(s): Office of the Vice President Marketing and Creative Services
• Guidelines

  BU Brand Guidelines – Design

  Responsible Office(s): Office of the Vice President Marketing and Creative Services
• Guidelines

  BU Brand Guidelines – Editorial Style

  Responsible Office(s): Office of the Vice President Marketing and Creative Services
• Guidelines

  BU Brand Guidelines – Logos

  Responsible Office(s): Office of the Vice President Marketing and Creative Services
• Guidelines

  BU Brand Guidelines – Voice and Tone

  Responsible Office(s): Office of the Vice President Marketing and Creative Services
• Guidelines

  Trademark Licensing Guidelines

  Responsible Office(s): Office of the Vice President Marketing and Creative Services

  Last Modified: 05/15/2018

Copyright

• Policy

  Annual Notice Concerning Peer-to-Peer File Sharing

  Responsible Office(s): Information Services and Technology
• Policy

  Copyright Policy

  Responsible Office(s): Human Resources | Office of the Dean of Students | Office of the University Provost
• Policy

  Copyright Policy (faculty)

  Responsible Office(s): Office of the University Provost
• Procedure

  Copyright Violation Process
• Procedure

  Digital Millennium Copyright Act Procedures

  Responsible Office(s): Information Security
• Resource

  DMCA and Copyright Infringement

  Responsible Office(s): Information Security
• Policy

  Employee Handbook – Section 405 Copyright – Employees

  Responsible Office(s): Human Resources

  Last Modified: 04/21/2026
• Policy

  Intellectual Property Policy

  Responsible Office(s): Office of the University Provost
• Policy

  Patents (see Intellectual Property Policy)

  Responsible Office(s): Office of Research

Data Protection Standards

• Standards

  Cyber Risk Assessment Standard

  Responsible Office(s): Information Services and Technology
• Standards

  Cybersecurity Training, Compliance, and Remediation Standards

  Last Modified: 05/01/2026
• Standards

  Data Access Management Standard

  Last Modified: 05/01/2026
• Standards

  Data Center Security Standards

  Responsible Office(s): Information Services and Technology

  Last Modified: 05/01/2026
• Standards

  Data Classification Standard

  Responsible Office(s): Information Services and Technology

  Last Modified: 05/01/2026
• Standards

  Data Lifecycle Management Standard

  Responsible Office(s): Information Services and Technology

  Last Modified: 05/01/2026
• Standards

  Data Protection Standards Overview

  Responsible Office(s): Information Security

  Last Modified: 05/01/2026
• Standards

  Identity and Access Management Standards

  Responsible Office(s): Information Services and Technology

  Last Modified: 05/01/2026
• Standards

  Log Collection, Analysis, and Retention Standard

  Responsible Office(s): Information Services and Technology
• Standards

  Minimum Security Standards

  Responsible Office(s): Information Services and Technology

  Last Modified: 05/01/2026
• Standards

  Vulnerability Management Standard

  Responsible Office(s): Information Services and Technology