1. Protocol Intrinsic to Computing Technology 

               1.1    By virtue of having a CNM network account, (whether e-mail, web, or both),
         the user grants specific permission to CNM, and CNM reserves the right, to
         access all information  stored on its systems.  Accounts are not granted 
         without this permission and are locked if such permission is withdrawn by the
         user. 

               1.2     Network components automatically log a variety of information, whenever
                         any activity occurs, which includes, but is not limited to the following:

·        the Internet Protocol (IP) address of the requestor

·        date and time of the request

·        the file requested

·        the referring page (if available)

·        the type of browser used (if available) 

     1.3     Similar information is logged for telephone activity. 

     1.4     Monitoring transmissions or transactional information is necessary to ensure
               the security, performance, and stability of CNM’s systems and networks.
               System administrators and other authorized personnel make every reasonable
               effort not to view the contents of transmissions, data, and files that are not
               essential to the performance of  their jobs. 

     1.5      The deletion of electronically stored data on local drives by users is not
                necessarily permanent due to the fact that some software utility programs can
                retrieve deleted information from hard drives. In addition, deleted information
                could still reside on back-ups used to restore systems when service
                disruptions occur.  The retrieval of data will not occur without reasonable
                justification.    

     1.6     Despite reasonable efforts made by CNM to secure electronic data stored and transmitted using its systems and networks, the College cannot guarantee the security of such data against unauthorized access by other users, within or outside the CNM community (e.g., harvesting of accounts by hackers, or users leaving electronic devices logged onto CNM systems and networks unattended). 

2. Standard Practices

2.1       In general, confidential information or data pertaining to employees are not to be disclosed to third parties without the employee’s written permission.   

2.2       In general, information pertaining to student records is not to be disclosed to third parties without the student’s written permission. 

2.3       Anyone receiving a request for public information from an individual or entity outside CNM should refer the requestor to the Office of the Vice President for Administrative Services.  

             2.4       Since CNM is a public institution, electronic records and data pertaining to
                         its administrative business are considered to be the property of CNM and/or
                         public record.   

             2.5       It is permissible for supervisory staff to access an employee’s work-related
                         electronic files when the employee is away from work, if necessary, or if
                         deemed reasonable, with approval from the Human Resources Department. 

            2.6       Users of CNM’s Information Technology resources share the responsibility
                        for keeping their own and the College’s data private and secure by not
                       sharing their passwords and PINs.

                          2.6.1   Users are advised to educate themselves on the risks to their privacy
                                     when using Internet resources.  To learn more about online privacy,
                                     check the following links:                       

                                    Privacy in Cyberspace Rules of the Road for the Information
                                    Superhighway

                                    EFF’s (Electronic Frontier Foundation) Top 12 Ways to Protect
                                    Your Online Privacy

                                    CDT’s (Center for Democracy and Technology) Guide to Online
                                    Privacy 

                                    Federal Trade Commission: Privacy Initiatives                                     

                                    Employee Monitoring: Is There Privacy in the Workplace?

                                    Searching and Seizing Computers and Obtaining Electronic Evidence
                                    in Criminal Investigations