AP.1.10 Personally Identifiable Information

Information may be shared by a school official in furtherance of her/his duties for educational purposes. When information is requested by non-school officials, the request must be reviewed according to the following criteria. There are two categories of student information relevant to this policy. The first, Personally Identifiable Information, is data that SUNY Morrisville will not share without written consent of the student. The second, Directory Information, is data that may be shared without written consent of the student. Exceptions are possible based on federal and state legal statutes.

Disclosure of directory information is discretionary rather than mandatory. SUNY Morrisville has the right to disclose Directory Information to some persons/entities but not others. Requests for student directory information that meet a legitimate College interest, and which are in compliance with Information Resources security policies, must be addressed to the Student Registration and Record Services Office for approval.

Personally Identifiable Information (consent needed)

  • Email addresses that are not assigned by SUNY Morrisville
  • Date and place of birth
  • Social Security number
  • Campus ID or digital identity
  • Citizenship
  • Race
  • Gender
  • Religion
  • Grades including mid-semester evaluations
  • Schedule of classes
  • Withdrawal date
  • Vehicle registration plate number
  • Driver's license number
  • Credit card numbers
  • Criminal record
  • Name(s) of student family members
  • Address(es) of student family members