The University of California has a contract with Google that provides assurances regarding the security and privacy of customer information stored on Google’s systems. UC's contract with Google takes precedence if there is a conflict with Google's posted terms or policies.
As part of adopting Google Apps for faculty and staff use, UC updated its 2008 Google contract originally set up for student deployments. This contract covers areas of concern to higher education and specifically to research institutions.
CORE APPS: Connect users have access to UCSB Connect Core Apps. Our core G Suite services are governed by a contract between the University of California and Google and are Family Educational Rights and Privacy Act (FERPA) compliant.
CONSUMER APPS: Additional Google Consumer Apps (Blogger, Google+, YouTube, Picasa, Reader, etc.,) are governed by a contract between YOU and Google. If you would like to use these Consumer Apps with your own account, you will need to agree to Google's Terms of Service and Privacy Policy, which govern these Consumer Apps.
Note: Google's Terms of Service and Privacy Policy with Consumer Apps may or may not adhere to the university's privacy of student record policy, and use of these Apps may make student record information available to the public. UCSB Core Google Apps are FERPA compliant.
So what's in the UC Google Contract?
Here are some of the key issues that are included in the UC/Google contract and terms of service:
- UCSB owns our content; Google has no ownership rights. Google may store our data in any of their international data centers.
- Google agrees to "reasonable security standards" and will have standard audits done. They will notify us about any security breach of our data.
- Google agrees to protect our information as they would their own. They link from the contract to the privacy policy.
- We are responsible for responding to third-party requests for UC information received by us or Google. Google will notify us about requests it receives for UC information, to the extent permitted by law.
- Google agrees to let us know in advance about changes to the service or terms of the agreement. So far, examples include Google's advance notice of user interface modifications and the consolidated privacy policy.
- No ads - the default setting is No Ads for Connect users.
- Google does scanning and indexing as part of offering the services like searches, anti-virus and spam management.
- UC agrees to use "commercially reasonable" efforts to ensure that its users comply with Google's Acceptable Use Policy, Google does not monitor UC activity looking for violations of its Acceptable Use Policy. Google will notify us if something comes to their attention.
- Google can suspend accounts if there has been a material breach of the service agreement and UC does not take action.
- No fees - for the initial term of the agreement, there are no fees for the service, though Google may offer premium services for a fee.
- Google agrees to comply with FERPA requirements as a "school official" consistent with FERPA's definitions.