UNLV Data Policies - History and Discussion
Note: Lynne Personius presented three policies - Access, Usage, and Integrity to the CIOC at their November 16, 2006 meeting. Based on requests made by CIOC members, revisions were made. In addition, CIOC requested that a new policy be written to provide context for those that defined the data governance structure. That was done. On December 1, 2006, all four were sent to CIOC to be forwarded.
November 17, 2006 - Memo to DGExec mail list from Lynne Personius
I presented three data policies to the CIOC on Thursday 11/16/06 - Access, Usage, and Integrity/Integration. The policies were received positively, with minor revisions requested. Final versions are attached to this note, and also available on the web site.
I was asked to create a new policy that provides context for the others. It describes the data governance structure. By incorporating the structure of the data governance initiative in policy, it will pass through a formal approval process. A new policy has therefore been written that is based on the discussions that I have had with you in the past. I am attaching that also for your review. Please share any comments that you have
November 13, 2006 - Memo from Lynne Personius to DGExec mail list.
Step one of the policy approval process - the question of whether we are considering the right policies with the highest priority - has been determined as of October 13, 2006 . At that point we moved ahead to evaluate drafts of the following, which are attached to this e-mail message:
- UNLV Data Access Policy - Provide appropriate access to data for employees while protecting data assets by assuring the proper use.
- UNLV Data Usage Policy - Ensure that the data assets of the university are not misused.
- Data Integrity and Integration - Ensure that university data has a high degree of integrity and that common elements have common definitions and values
Thanks for your subsequent review of each policy to determine that it contains language and provides direction to reflect your view of data governance at UNLV. I will present them to the CIOC at the next meeting scheduled for Thursday November 16th. They will be submitted as having been reviewed and approved by this group. Dawn has asked you to consider the following points regarding each respective policy. You may feel that the current language covers these points in the current documents. If I don't hear from you to the contrary, the policies will go forward for approval as is.
Topics raised by Dawn Neuman and included in November 13 memo.
Discussion/Response - DA01 Access
-
Responsibility of Users
Requests for Access
Legally Restricted or Limited-Access Data
Exceptions
Denial
Appeal
Use of Administrative Data only in the Conduct of University Business
Maintenance of Confidentiality and Privacy
-
Definition of Administrative Data
Categorization of and definition of data
Protection of Data
Accurate Presentation of Data
-
Promotion of Accurate Interpretation and Responsible Use
Determination of Security Requirements
Establishment of Archiving Procedures
Establishment of Disaster Recovery Procedures
What matters most is that these policies reflect what UNLV, as interpreted by the Executive Sponsors' group, wants to have in place.