Federal & State Regulations

The Federal and State regulations which UNC Asheville must adhere to in print and electronic forms are outlined here.

  • HIPAA – Health Insurance Portability and Accountability Act
  • FERPA – Family Education Rights and Privacy Act
  • GLBA – The Gramm-Leach Bliley Act
  • Sarbanes-Oxley
  • NC Identify Theft Act
  • FTC Red Flag Rules

Summarizing the protected information in the above legislation, the following information may not be published on any public web pages:

  • Social Security Number
  • Credit Card Numbers
  • Finance Account Numbers of Banks Account Numbers
  • Driver’s License Numbers
  • Health Insurance Policy ID Numbers
  • University employee and ID Numbers
  • Student Records protected by FERPA
  • Health Information protected by HIPAA
  • Passport and Visa Numbers
  • Faculty/Staff employment applications, personnel files, benefits information birth date and personal contact information
  • Admissions applications
  • Donor contact information and non-public gift amounts
  • Privileged attorney-client communications
  • Non-public UNC Asheville policies and policy/procedure manuals
  • UNC Asheville internal memos and email, and non-public reports, budgets, plans, and financial information
  • Non-public contracts
  • Research and other information covered by non-disclosure agreements