Regulatory Compliance

Rice University

Different departments are responsible for different aspects of compliance. The Rice University Compliance Matrix is a helpful resource in this regard.
Specific questions about compliance can be directed to the Rice Compliance Office.

Texas Personal Information Data Privacy Notification and Encryption Law: Business and Commerce Code Chapter 521

FTC Red Flags Rule - The Rice University Identity Theft Prevention Program was developed using the guidance provided by the Federal Trade Commission (FTC) “Red Flags Rule,” found in 16 C.F.R. 681.
Family Educational Rights and Privacy Act (FERPA) – Student records are covered by the requirements of this act. See also the Office of the Registrar's FERPA web page.
Health Insurance Portability and Accountability Act (HIPAA) – Describes protections for health information.
Gramm Leach Bliley Act (GLBA) – Requires financial institutions to protect nonpublic personal information.

Rice guidance on European Economic Area Privacy Notice and General Data Privacy Regulation (GDPR) - Outlines the collection, use, and disclosure of personal information provided to the university by individuals who are located in the European Economic Area (EEA).

Payment Credit Industry Data Security Standards (PCI DSS) – Personal credit card information is covered by these data security standards and apply to anyone who is a merchant or handles credit card and debit card transactions. Read Rice's Credit Card and Debit Card Handling Guidelines.