The willful ignorance &/or negligence demonstrated herein by the school administration is not unique to UT. Recently, in an architectural review of a large mid-west edu, the opinion was expressed to me by their hospital administration/management that compliance with things such as HIPAA are simply not their concern since they are non-commercial. The deficit of personal and custodial responsibility exhibited by so many who think they can rationalize their way out of the obligation would be sad if it weren't so infuriating.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/newsbriefs/193/921#921