In an effort to respond to COVID-19, institutions of higher education are undertaking unprecedented operational changes, and doing so at lightning speed. If you have not already done so, it is important to take a moment to consider whether the changes that have occurred on your campus have given rise to new student privacy matters that need to be addressed. READ MORE

Cybersecurity risks for institutions of higher education are even more pronounced since the Department of Education indicated it will start evaluating security controls as part of its annual student aid compliance audits of Title IV-eligible schools. READ MORE

As a general matter, the HIPAA Privacy Rule protects confidentiality of health information and imposes various restrictions on the use and disclosure of such information. However, the Office of Civil Rights, the governmental agency that enforces the HIPAA Privacy Rule, has clarified that the HIPAA Privacy Rule generally does not apply to institutions of higher education. READ MORE

Many institutions assume that if they have received a subpoena or court order, they are permitted to produce the documents in question without first obtaining authorization from the affected student (or, in the case of a minor, a parent). This assumption is not entirely correct. READ MORE

Welcome to REGucation, the higher education blog that strives, through practical advice and insight, to help the higher education community manage a fast-changing and increasingly complex regulatory environment. READ MORE