Babson College - A Statement of Confidentiality and Responsible Use for Volunteers
Confidentiality is a paramount consideration in the work done throughout Babson College, whether in admissions, communications, alumni relations, or fundraising or another departments. We rely on all persons with access to College data to maintain strict confidentiality concerning information obtained during the conduct of their volunteer activities for the College.
This document provides volunteers of Babson College with the rules and guidelines for the use of restricted use data. Restricted use data means any and all information provided to you by Babson College faculty and/or staff, including without limitation contact, relationship and other personal information and is provided to you solely for the purpose of assisting the College and/or department involved in its activities and you may not use it for any other purpose. See Addendum for the Chart of Data Classification Guide published by Babson ITSD.
In addition to the other statements, terms and conditions in this document, I agree:
- To protect and safeguard from and against unauthorized access, use or disclosure Confidential Information as instructed by Babson College to which I am granted access because of my volunteer role with Babson College;
- To keep Confidential Information to myself and, therefore, not use, transmit, access, disclose, share, distribute, publish, toss-out, nor destroy Confidential Information except solely as instructed by Babson College in connection with volunteer activity;
- To abide by all mail and/or solicitation controls as identified on the reports provided to me by College personnel;
- Not to collect, store, take or retain any of this Confidential Information whether in hard copy or electronic form in any personal device, on my person, or in my home or car;
- To destroy all Confidential Information in my possession or control only as instructed by the College. I will not put Confidential Information in trash or recycling bins;
- I am providing these services as a volunteer primarily for my own personal reasons;
- I am subject to all of the College’s directions made known or available to me regarding my volunteer activity;
- I am not entitled to and will not seek nor receive or accrue any compensation or employment benefits from Babson College in connection with my volunteer activity;
- I am at least eighteen (18) years of age; and
- This statement covers my volunteer activities as of the date I sign through the academic year expiring June 30, 2025.
Addendum
Chart of Data Classification Guide published by Babson ITSD
| Data Classification Type | Definition | Impact | Examples |
|---|
| Regulated Use | Restricted Use Data which is: (i) subject to Massachusetts breach notification laws and regulations (ii) health care information; (iii) legally protected biometric data; (iv) export controlled materials; (v) controlled unclassified Information; or (vi) covered by Payment Card Industry data security systems rules. | Unauthorized access, use, disclosure storage and/or destruction could result in criminal or civil penalties, identity theft, financial loss, invasion of privacy and/or material adverse effects on the College or individuals, and could additionally result in notification and other obligations to affected parties and governmental authorities. | - Social Security Numbers
- Credit Card Numbers
- Financial Account Information
- Driver's License Number
- Passport
- PCI Data
- HIPAA info
- Biometric Info
- Export Controlled data
|
|---|
| Restricted Use | Data which requires protection from unauthorized access, use, disclosure, modification, or destruction by contract, law, regulation or industry rule. | Unauthorized access, use, disclosure storage and/or destruction could result in criminal or civil penalties, identity theft, financial loss, invasion of privacy and/or material adverse effects on the College or individuals. | - Payroll Data
- Passwords
- Donor Information
- Attorney/Client Privileged Documents
- NDA-protected Data
|
|---|
| Internal Use Only | Data which presents a meaningful risk to the College or individuals from unauthorized access, use, disclosure, modification, or destruction, but is not subject to any contract, law, regulation or industry rule. | Data that is not for public consumption. Its handling is primarily based on College policy and/or internal procedures and takes into account proprietary, ethical, business practice or privacy implications. | - Internal Memos, Reports
- Business Records
- Policies, Procedures
- Budget Plans
- Security Information
|
|---|
| Unrestricted | Data which presents minimal or no risk to the College or individuals from unauthorized access, use, disclosure, modification or destruction, and is not subject to any requirement for confidentiality. | Data that may, or must, be available and accessible to the general public with no expectation for privacy, risk or confidentiality. There are no legal and institutional limitations on its access or use. | - Campus Maps
- Course Catalogues
- College Social Media
- Web Pages
- Published Financial Statements
- Certain Research Data
|
|---|