Website and Web Form Data Policy for the College of Arts and Sciences
This applies to the College of Arts and Sciences' main website (https://www.as.uky.edu), the College of Arts and Sciences' forms server (https://forms.as.uky.edu), and any other Arts and Sciences department and program websites (*.as.uky.edu). It outlines the types of information that can be collected and/or made available on any of these domains. This policy does not make a distinction between publicly accessible and private (requiring user login) portions of the websites, but instead is meant to apply to the websites in full.
Personal Information *
Other than the full name of a person, no personally identifiable documents or data can be requested through or displayed on the College of Arts and Sciences websites. This includes but is not limited to:
- Student or employee ID numbers
- Social security numbers
- Date of birth
- Drivers license, Passport or any other federal or state identification card (number or photocopy)
- Student education records **
- Any document containing any of the above pieces of information.
Acceptable Personal Information
Items which are publicly available and/or are not included in the HR5 definition of personal information. These include:
- linkblue ID/username
- Personal contact information (phone, email)
- Office contact information
- Home Address (not recommended)
Financial Information
No personal or institutional financial information should be used within the Arts and Sciences website. This includes but is not limited to:
- Pro-card and UK account numbers for external agencies.
Exception: Internal UK numbers that cannot access external resources are acceptable. - Documents pertaining to financial eligibility for a scholarship or program.
If you are unsure whether a given piece of information is acceptable, please contact us.
----------------------------------------------------------------------------------------------------------------------------
* The definition of personal information from KRS 61.931:
(6) "Personal information" means an individual's first name or first initial and last name; personal mark; or unique biometric or genetic print or image, in combination with one (1) or more of the following data elements:
- An account number, credit card number, or debit card number that, in combination with any required security code, access code, or password, would permit access to an account;
- A Social Security number;
- A taxpayer identification number that incorporates a Social Security number;
- A driver's license number, state identification card number, or other individual identification number issued by any agency;
- A passport number or other identification number issued by the United States government; or
- Individually identifiable health information as defined in 45 C.F.R. sec. 160.103 except for education records covered by the Family Educational Rights and Privacy Act, as amended, 20 U.S.C. sec. 1232g;
For the full text of the definitions for KRS 61.931 to 61.934, see: https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=43575 (PDF)
** The definition of education records by FERPA regulation:
"Education records" are records that are directly related to a student and that are maintained by an educational agency or institution or a party acting for or on behalf of the agency or institution. These records include but are not limited to grades, transcripts, class lists, student course schedules, health records (at the K-12 level), student financial information (at the postsecondary level), and student discipline files. The information may be recorded in any way, including, but not limited to, handwriting, print, computer media, videotape, audiotape, film, microfilm, microfiche, and e-mail.
Personal Information is also covered in part by FERPA regulations. For UK’s details on FERPA compliance, see the registrar website: https://registrar.uky.edu/ferpa
For the U.S. Department of Education's FERPA website, visit: https://www2.ed.gov/policy/gen/guid/fpco/ferpa