Western Washington University is committed to the protection and responsible use of personal information collected from and about its students, faculty, staff, alumni, donors, business partners, and others who engage with the University. Those responsible for handling personal information are expected to do so with the utmost care and in compliance with the University Privacy Program Principles, contractual agreements, and state and federal laws.
Privacy Program Resources
University executive leadership delegates responsibility for the oversight of privacy based on record/data type to the following compliance owners:
| Record/Data Type | Compliance Owner |
| Employee Records/Data | Associate VP for Human Resources |
| Student Records/Data | Associate VP for Enrollment & Student Services/FERPA Officer |
| Financial Records/Data | Director of Financial Services |
| Research Records/Data | Vice Provost for Research |
| Medical Records/Data | Based on Clinic Director |
| Library Records/Data | Assistant Dean of Libraries |
| Alumni & Donor Records/Data | Assistant VP for Advancement Services |
| Vendor Data/Data Sharing & Non-disclosure Agreements | Chief Procurement Officer |
| Archived Records | University Archivist |
The University Privacy Sub-Committee is formed by the standing University Ethics and Compliance Committee with a specific focus on the privacy of personal information.
Western’s Privacy Management Framework
What is a privacy management framework?
The framework is a structured set of key functions and objectives from which tasks and controls are implemented to:
- Collectively address privacy related compliance requirements,
- Protect personal data and mitigate privacy risks, and
- Support and facilitate individual privacy rights.
What are the Benefits of a Privacy Framework?
- Streamlined approach to multiple laws
- Measurable program maturity
- Leadership assurance
- Increased efficiencies and reduced costs
- Improved risk mitigation
- Effective program evaluation
- Alignment with enterprise strategy
- Unification of privacy, security, and compliance efforts
- A sustainable privacy program
Western's Data Privacy Principles
Why are Data Privacy Principles needed?
- To ensure the Privacy Program aligns with and reflects Western's values.
- To support decision making when privacy regulations are:
- In conflict,
- Silent on a particular issue, or
- Out-dated and not current with public expectations.
| Policy/Rule # | Policy/Rule Title |
| POL-U5315.02 | Affording Individual Privacy Rights Policy |
| POL-U3000.07 | Securing Information Systems Policy |
| POL-U6500.03 | Using Drones at Western |
| POL-U4520.08 | Protecting Human Subjects in Research |
| WAC 516-26 | Student Records |
| WAC 516-09 | Public Records |
| Online Privacy Statement |
Due to its vast number of academic programs and business operations, Western Washington University is subject to various privacy laws. Below are the major data categories to select and view a summary of privacy law information related to each category. The laws listed under each category are not-all inclusive.
| Academic Data |
| Financial Data |
| Employment Data |
| Research Data |
| Medical Data |
| Youth Data |
2024
Please click on the monthly issue in either PDF format or in the accessible WORD format.
| Month – PDF format | Month – Accessible WORD format |
| January | January |
| February | February |
| March | March |
| April | April |
| May | May |
| June | June |
| July | July |
| August | August |
| September | September |
| October | October |
| November | November |
| December | December |
Tools for Privacy Owners and Departments
News and Updates
Annual State Privacy Assessment Survey
As required by RCW 43.105.369, Western participates in an annual privacy review of state agency practices to measure privacy maturity across agencies. The information is used by the Washington’s Office of Privacy and Privacy Protection to submit performance reports to the legislature and develop needed resources and trainings to help agencies mature their privacy programs. The goal is to establish an understanding of current privacy practices of state agencies, not to measure or audit compliance with specific laws or standards.
Click here to see the 2023 survey results.
Annual State Data Breach Report
Data breaches continue to be a threat to individual’s privacy. This report highlights the:
- Number or breach reports received in 2023,
- Primary causes of the breaches,
- Specific types of data that were exposed, and
- Attorney General’s recommendations to the state legislature.
Click here to view the 2023 report.
Protect Your Privacy Resources
Tips for Safely Using Public Wi-Fi
Video Conferencing Best Practices
