Background

National Louis is required by the Gramm-Leach-Bliley Act ("GLBA") and its implementing regulations at 16 CFR Part 314, to implement and maintain a comprehensive written Information Security Program ("ISP") and to appoint a coordinator for the program. The objectives of the ISP are to (1) insure the security and confidentiality of covered information; (2) protect against anticipated threats or hazards to the security and integrity of such information; and (3) protect against unauthorized access or use of such information that could result in substantial harm or inconvenience to customers.

Related Policies

This ISP is in addition to existing National Louis policies and procedures that address various aspects of information privacy and security, including but not limited to, the Student Privacy Rights Policy (Family Educational Rights and Privacy Act Policy), the Data and Computer Security Policy, and the Computing Policy.

ISP Coordinator

National Louis has designated the Vice President for Information Technology and CIO

as its ISP Coordinator. The ISP Coordinator may designate other individuals to oversee and/or coordinate particular elements of the ISP.

Covered Information

"Covered information" means nonpublic personal information about a student or other third party who has a continuing relationship with National Louis, where such information is obtained in connection with the provision of a financial service or product by National Louis, and that is maintained by National Louis or on National Louis's behalf. Nonpublic personal information includes students' names, addresses and social security numbers as well as students' and parents' financial information. Covered information does not include records obtained in connection with single or isolated financial transactions such as ATM transactions or credit card purchases.