InCommon Federation Discussions About Online Student Services

[Ann West <>]

All,

Our next InCommon-Student call is today at 3:00 pm Eastern. Bridge info 
is the usual:

877-944-2300
99208#

Agenda
----------
- Update agenda

- Notes review and approval

- Action Item Review
   - Ann to ping Charlie Leonhardt (chair) and ask him to join our next 
call.  

- CAMP Update - Ann
www.educause.edu/camp091

- AACRAO College and University Article - Joanne

- Discussion of Ken's next Attributes Paper - Ken

See the wiki at https://spaces.internet2.edu/display/InCCollaborate and 
click
on Pseudonymous Identifiers and the Data Protection Directive (95-46-EC).
Ken's discussion points for this item:

There are at least two current issues associated with privacy.

1. A French student at the Univ of Chicago campus in Paris is probably 
governed by both US FERPA and EU privacy. The latter means that consent 
must be sought from the student before personally-identifiable 
information is released to an external resource. This likely means, for 
example, that if Chicago is using an outsourced testing service that is 
based on student names there would need to be an explicit consent by 
each French student, and a ready means to revoke consent, when they went 
to the testing web site.  (Unless it is deemed to be required.)

Discussion points: done now? handling opt-outs? who deems required?

2. It seems that we can get approval of our privacy approach  - the use 
of pseudonymous identifiers (the ePTID that we use) - in the EU  through 
a combination of technical means (which we do already) and an agreement 
by the IdP to not release the real student or person behind the 
pseudonymous identifier unless under court order.  For scaling and 
consistency sake, the federation would adopt a federation-wide policy 
saying that universities could not release (typically to an aggrieved 
relying party) the ePTID to actual person mapping except by court order.

Discussion points: how to develop and socialize and implement such policies.

Hope you can join the call,
Ann