Complete texts of the various laws listed below are available in the reference
section of the Central Library.
For interpretations of the various laws listed below the Records Advisor should
be consulted. See PPM 480-3, Supplement I for list of Records Advisors.
California Public Records Act (CPRA)
The California Public Records Act provides that access
to information concerning the conduct of the
people's business is a fundamental and necessary right of every person in
this State; that public records must be open to public inspection during
regular office hours; and that every citizen has the right to inspect any
public record except as provided in the Act.
Federal Privacy Act of 1974 (FPA)
The Federal Privacy Act is designed to safeguard the rights and privacy of individuals from
the encroachments of Federal agencies in maintaining records on individuals.
Except with respect to social security numbers (SSN), it applies to the University
only in relatively few instances in the area of Contracts and Grants.
The University cannot require individuals to disclose their SSN unless:
The disclosure is required by law
The University system of records which requires the SSN was in existence
and operating before January 1, 1975 AND the purpose for which
the collection was made is STILL THE SAME.
When requesting the SSN from individuals, their rights under the Federal Privacy Act must
be explained by use of a written statement that tells individuals if
disclosing the SSN is mandatory or voluntary, by what authority the number
is requested, and what it will be used for. (See Exhibit A for sample
statement.)
For more specific details of the law, contact the campus IPA coordinator
and the manager of the Contracts and Grants office.
Family Education Rights and Privacy Act (FERPA) and the State Stull Act
These laws pertain to student records. They define student records, grant
students access to their records, provide students an opportunity to
request changes to their records, and provide students privacy of
their records.
Confidentiality of Medical Information Act (MIA)
This law defines medical information and requires authorizations for release,
acquisition and disclosure of medical information. The Director of Medical
Records should be consulted for more information regarding this law.
Information Practices Act (IPA)
The IPA provides special procedures for providing access to and protecting
the privacy of state records containing personal data. All University
records which fall within the definitions
listed in 480-3 are covered by this
law including, but not restricted to personnel, business and financial,
gift and endowment, alumni, patents, publications, medical, library and
research records. Student records which are
covered by FERPA and the Stull Act are excluded. It should be noted that the IPA is
not confined to what are traditionally referred to as personnel records,
and the term confidential information is narrowly defined by this law.
See PPM 480-3 for further information and guidance.