General Information Technology Policies


Federal Laws and Regulations

There are laws and regulations that require the university to apply certain security safeguards around various categories of sensitive institutional data or information. Industry standards, such as those that apply to credit card payments, create additional requirements. University policies are written to support institutional compliance with these laws and regulations.

Responsible Use

Responsible use policies stipulate the principles, rules, standards of conduct, and practices that members of the university community agree to comply with as a condition of being provided access to U-M information networks and resources.

The Statement on Stewardship outlines the fundamental responsibilities of every member of the university community in their functioning as a steward of University resources, including information resources.

Information Security

Information security policy is a set of policies and related standards that deal with how the university protects its information technology assets and institutional sensitive data while complying with all relevant federal, state, and local laws and regulations.


Privacy policies express the university’s commitment to maintain the privacy and confidentiality of personal information given to it, whether from students, faculty, staff, patients, customers, alumni, donors, or visitors.  These policies state the conditions under which U-M maintains, stores, or discloses personal information and complies with federal and state privacy laws and regulations.

Data Management

Data management policies reflect the current data governance structure at U-M. are concerned with the end-to-end lifecycle of all institutional data, and most importantly support the access by appropriate and authorized members of the university community to trustworthy and reliable institutional data when and where it is needed.

Digital Copyright Compliance

The university is required to comply with the digital copyright protection provisions of these federal laws:

Information Technology System Standards

System standards are documents designed to help ensure that the university is consistently applying technical processes and protocols that reflect current industry best practices.

Policies from Other Institutional Areas with Information Technology-Related Provisions