Policy for Safeguarding Information
Definitions
Customers are prospective students and students, who apply for admission, and make application for private or government grants or loans to finance their educations.
Personally identifiable information is information which is not publicly available, such as:
- Your name, address, and social security number
- Name of your financial institution, account number
- Information provided on you Capri enrollment application
- Information provided on your application for a grant or loan
- Information provided on a consumer report
- Information obtained from a website
Policy
Capri is committed to implementing a comprehensive information security program, consistent with the size and complexity of this institution and the nature of its educational activities, to maintain and safeguard your personally identifiable information against damage or loss. The policy covers all student records in whatever format (hard copy, electronic).
The Admission Office shall be responsible for coordinating the school's information security program. At least once every three years, the office will assess foreseeable internal and external risks to the security, confidentiality, and integrity of customer information that could result in the unauthorized disclosure, misuse, alteration, destruction or other compromise of the information. The risk assessment shall cover every relevant area of school operations, including but not limited to:
- Employee training and management
- Network and software design, processing, storage, transmission and disposal of information
- Ways to detect, prevent, and respond to attacks, intrusions or other systems failures
The Admission Office shall design and implement safeguards to control identified risks and shall monitor the effectiveness of them, recommending changes when warranted.
Records for prospective students who are not accepted or who do not enroll in Capri shall be held for 12 months. After one year, the records will be destroyed in a secure manner. Records of enrolled students shall be maintained in accordance with federal and state law and accreditation requirements.
Students shall receive an initial notice of this policy at the time they submit a signed application for enrollment. All currently enrolled students shall receive a notice in the Student Handbook.
Capri shall only enter into servicing agreements with service providers who also maintain appropriate safeguards for customer's personally identifiable information.
[ back ]
