Policies

Penn State’s requirements and expectations for managing personal data.

Penn State’s privacy policies establish the framework for how personal data is collected, used, shared, and protected across the university. If your role requires handling personal information, it’s important to understand your responsibilities under university privacy policies. If you're unsure which policy applies to your role or activity, please contact the Privacy Office for guidance at privacy@psu.edu.

  • AD53-Privacy Policy

    Penn State's Policy AD53 establishes a framework for compliance and responsibility regarding privacy and the protection of an individual’s personal information.

  • AD22- Health Insurance Portability and Accountability Act (HIPAA)

    Penn State's Policy AD22 describes the responsibilities of The Pennsylvania State University (“University”) under the Health Insurance Portability and Accountability Act of 1996 and its implementing federal regulations (collectively, “HIPAA”).