Privacy and information security
Gramm-Leach-Bliley Act (GLBA)
When you apply for financial aid, you trust MVU with sensitive financial information. Federal law requires us to protect it. Here’s how we do.
Questions?
Contact the Information Security Office
For general privacy questions, see the Privacy Policy.
What the law requires
Your financial information is protected.
The GLBA Safeguards Rule, enforced by the Federal Trade Commission, requires colleges and universities to keep a written Information Security Program that protects “customer information.”
What’s covered
Nonpublic, personally identifiable financial information MVU receives in connection with a financial product or service, such as a student loan.
At MVU, this mainly means financial aid records: aid forms, FAFSA information, and supporting documents such as tax forms.
What MVU does
- Identifies and assesses risks to the security and privacy of your information
- Designs, tests, and monitors safeguards to control those risks
- Oversees the service providers that handle your information
- Reviews the program at least once a year
MVU’s Chief Information Officer, or a delegate, coordinates the Information Security Program. Each office that handles customer information keeps its own procedures and reviews them with the Information Security Office every year, or sooner if something changes.
Safeguards
How we keep it safe.
MVU protects customer information with three kinds of safeguards.
People and training
- Background checks before hiring employees who will have access to certain customer information
- New employees complete security training within their first two months
- Employees agree to follow MVU’s data-handling policies
Technology
- Strong passwords that are changed regularly
- Information protected in transit by secure, encrypted connections
- Firewalls, anti-virus protection, and regular security updates
- Activity logs reviewed and alerts for attempted attacks
- Computers lock automatically after a period of inactivity
Physical security
- Paper records in locked cabinets when unattended
- Servers in secure areas with limited access
- Offices locked when no one is present
- Records kept and destroyed according to MVU policy
Service providers
MVU works only with service providers that maintain appropriate safeguards, and every provider that handles covered information is contractually required to protect it.
Learn more
Related information.
Privacy Policy
How MVU collects, uses, and protects personal information on this website.
Student Consumer Information
Federally required disclosures for students and families.
Stay safe online
Tips from MVU IT for spotting phishing and protecting your accounts.
Program review last updated October 8, 2024, by the Office of the Chief Information Security Officer. Read the FTC Safeguards Rule.