R765-649. Utah Higher Education Assistance Authority (UHEAA) Privacy Policy  


R765-649-1. Purpose
Latest version.

The purpose of this rule is to provide the terms of UHEAA's privacy policy concerning the disclosure of customer nonpublic personal information, as defined in the Gramm-Leach-Bliley Act, referenced below.


R765-649-2. References
Latest version.

2.1 Utah Code Title 53B, Utah System of Higher Education, Chapter 12.

2.2 U.S. Congress, Title IV of the Higher Education Act of 1965, as amended.

2.3 U.S. Federal Trade Commission. Code of Federal Regulations, 16 CFR Part 313.

2.4 Pub. L. No. 106-102, the Gramm-Leach-Bliley Act


R765-649-3. General
Latest version.

3.1 UHEAA collects nonpublic personal information about customers from:

3.1.1 information received from customers on applications or other forms;

3.1.2 information from customer transactions with UHEAA, its affiliates or others; and

3.1.3 information received from a consumer reporting agency.

3.2 UHEAA does not disclose any nonpublic personal information about our customers or former customers to anyone, except as permitted by law.

3.3 UHEAA restricts access to nonpublic personal information about customers to those employees who need to know such information to provide products or services to customers. UHEAA maintains physical, electronic, and procedural safeguards that comply with federal regulations to guard customer nonpublic personal information.