Data Security

Users of Achieve have access to data protected by the Family Educational Rights and Privacy Act (FERPA) and should be aware of the following:

• USU's FERPA training is required of all Achieve users.
• Achieve users are classified as "Data Users" under USU's Information Security Policy (551) which states:
  "Data Users are any persons who are authorized to examine or utilize data, including Personally Identifiable Information (PII) and/or Critical Institutional Data (CID), as part of their duties. Data Users must protect against unauthorized access, duplication, or release of PII as well as loss or corruption of CID from their user-controlled equipment, accounts, and credentials, and to follow all service and access policies, programs, and procedures established by their units and/or USU."
  
• Users interacting with Achieve must log in with their personal account to add an additional layer of security (e.g., Multifactor Authentication) and ensure adjustments in the system are properly tracked. Orphan accounts may be used to link Achieve with an orphan account's calendar.