Protecting the privacy of a student’s personal information is important and
required by state and federal regulations. Oregon Student Access Commission
(OSAC) staff and contractors must respect an individual’s right to privacy
and recognize the obligation to keep information about students and their families
secure and confidential.
OSAC staff and contractors may not disclose any nonpublic personal information to
anyone, except as permitted by state or federal law. Information about
students and their families may not be sold or shared with outside marketers.
This policy uses the term “nonpublic personal information.” This
term refers to personal information about students and their families that identifies
them and is not available from public sources, such as date of birth, Social Security
Number, or an unlisted telephone number.
OSAC collects nonpublic personal information from the following sources:
- Information provided to OSAC by the student. This can include OSAC scholarship application
forms, correspondence, communications, and other submitted materials.
- Information about student and family transactions with the U.S. Department of Education
and their agents. This includes data from the Free Application for Federal Student
- Information received from schools that students attend or formerly attended, or
to which they have applied for admission.
- Information from employers and organizations for the purposes of verifying eligible
applicants for their employer or member scholarship.
OSAC staff and contractors must maintain physical, electronic, and procedural safeguards
in compliance with federal regulations to safeguard students’ and their families’
nonpublic personal information.
Additionally, nonpublic personal information provided to the Office of Degree Authorization
by schools or individuals regarding staff and faculty qualifications as well as
certain confidential complainant information and information regarding ongoing criminal
investigations must be protected.
OSAC considers privacy, security, and service in our online operations to be just
as critical as any other OSAC business operation. OSAC employs a variety of
proven, internet-specific protections, including secure socket layer connections,
firewall technology, and encryption. OSAC staff and contractors may not share
nonpublic personal information online unless OSAC-approved encryption and other
protections are employed.
Please direct questions to the Oregon Student Access Commission, 1500 Valley
River Drive, Suite 100, Eugene OR 97401, or call (541) 687-7400.