KUMC Policies, Procedures and Operational Protocols : Information Resources Policies and Operational Protocols

University of Kansas Medical Center Operational Protocol: Internet Use

1. Principles Statement

The University of Kansas Medical Center expects all members of its community to use Internet resources accessed through its computer and network systems in a responsible and ethical manner, as outlined in its Appropriate Use of Information Systems Policy. The University of Kansas Medical Center provides access to the Internet through its computing and network systems at its discretion.

2. Purpose

The University of Kansas Medical Center seeks to enforce its policies regarding harassment and the safety of individuals; to protect itself against seriously damaging or legal consequences; to prevent the posting of proprietary software or the posting of electronic copies of literary works in disregard of copyright restrictions or contractual obligations; and to safeguard the integrity of computers, networks, and data, either at the University of Kansas Medical Center or elsewhere.

3. Individuals and Groups Covered By This Policy

Anyone originating an Internet transaction from IP address 169.147 (kumc.edu)

4. Definitions

INTERNET- The term `Internet' as used in this document means Internet resources including World Wide Web, list-servers, USENET news groups, and other Internet resources and services.

COMPUTING AND NETWORK SYSTEMS- The term 'computing and network systems' means any information service, system, or access software that enables computer access by multiple users to a server, specifically a service or system that provides access to the Internet and such systems operated or services offered by the University of Kansas Medical Center.

UNIVERSITY- The term 'the University' means the University of Kansas Medical Center.

5. Introduction

The University of Kansas Medical Center, through its computing and network systems, provides Internet access for students, faculty, staff, and other authorized users affiliated with the University. The University of Kansas Medical Center encourages the use of these resources to further its mission:

the highest quality instruction
high levels of research productivity
excellence in patient care
service to Kansas, the nation, and the world through research, teaching, and the preservation and dissemination of knowledge
preparation of its students for lives of learning and for the challenges that educated citizens will encounter in an increasingly complex and diverse global community
fostering a multicultural environment in which the dignity and rights of the individual are respected, and in which intellectual diversity, integrity, and disciplined inquiry into the search for knowledge are of paramount importance.

5.1 General Internet Access Rules

Generally, Internet access is provided for use in activities relating to instruction, research, and public service. Limited personal use is also permitted provided that such use does not:

interfere with University of Kansas Medical Center operations.
generate incremental identifiable costs to the University of Kansas Medical Center.
negatively impact the user’s job performance.
involve other employment, the operation of a personal business, or other similar commercial or business activities without prior approval by the Executive Vice Chancellor (EVC) or the EVC's designate.
violate the University codes of conduct, regulations, policies, or laws.
violate Federal or State laws.
display or transmit words, images or sounds that are offensive to a reasonable person (except as may be appropriate in the educational, research, or clinical contexts.)

5.2 Monitoring Internet Use

The University of Kansas Medical Center supports a climate of trust and respect and does not ordinarily monitor student or employee use of the Internet. The University does not condone censorship, nor does it endorse the inspection of electronic files.

The University of Kansas Medical Center also acknowledges the complexity of deciding what constitutes appropriate use of the Internet. What is appropriate or inoffensive to some members of the community may be inappropriate or offensive to others.

Caution: Open access to network-based services brings with it a degree of risk. In a community such as the University of Kansas Medical Center, which supports diversity of values and perspectives, and the respectful freedom of expression, individuals may not be protected against the existence or receipt of material that may be offensive to them.

5.3 Authorized Tracking of Internet Use

Nevertheless, the University of Kansas Medical Center is a public institution and all University information may be accessed when considered necessary and legally appropriate. The Executive Vice Chancellor (EVC) or the EVC's designate may authorize tracking of its student or employee Internet use in a number of circumstances including, but not limited to:

Situations involving the health or safety of people or property.
Possible violations of University codes of conduct, regulations, policies, Federal or State laws or contractual agreements.
Other legal responsibilities or obligations of the University.

5.4 Logging Internet Traffic

The logging features of routers, proxy servers, and other devices are enabled for reasons of security. This log may be required to assist in an investigation in the event of unauthorized access to an outside server from a University IP address.

Internet traffic logs may be accessed by selected employees of the Department of Information Resources for purposes related to security management, system maintenance, or system troubleshooting. Internet traffic logs can only be accessed for other purposes under the authority of the Executive Vice Chancellor (EVC) or the EVC's designate. Designates of the Executive Vice Chancellor include, but are not necessarily limited to, the Vice Chancellor for Administration, the Chief Information Officer, and Legal Counsel. University employees who, for any reason other than system troubleshooting or security management, access router, proxy server, or other logs that track Internet use; intercept data packets; impart to others Internet access information gained in the course of system maintenance or security management; or otherwise compromise the confidentiality of student or employee Internet access without the express direction of the Executive Vice Chancellor or his designate are subject to disciplinary action, including dismissal.

Caution: The University of Kansas Medical Center cannot assure the confidentiality or privacy of Internet use. Authorized technicians access Internet use records for system troubleshooting and security management purposes. In exceptional cases, a system or network technician may detect evidence of a violation while performing his or her duties. In such instances, the technician should contact his or her supervisor for further guidance.

5.5 Restrictions on Internet Use

The University of Kansas Medical Center may restrict or deny the use of its computing and network systems to access Internet resources in response to alleged evidence of violations of University policies or codes, state or federal laws, or contractual obligations. Once evidence is established, University of Kansas Medical Center authorities responsible for overseeing these policies and codes will determine the appropriateness of specific restrictions, which could include limiting access to the university's computing network systems.

This policy is in accordance with :

University of Kansas Medical Center
Handbook for Faculty and Unclassified Staff

University of Kansas Medical Center. Student Handbook

University of Kansas Medical Center
Appropriate Use of Information Systems Policy

University of Kansas Medical Center Copyright Policy

Kansas Board of Regents Policy and Procedures Manual

Kansas Information Technology Office Policy 1200 concerning Acceptable Use of the Internet, sections 5.2 and 6.3.

(NOTE: Other applicable federal and state codes may be added)

Any restrictive actions taken by University of Kansas Medical Center authorities will be in accordance with guidelines and procedures set forth in these policies, codes, or laws. The restrictive actions pertaining to this policy and described in the Policy Specifics section below (Section 6), conform to the Electronic Communication Privacy Act of 1989, Title 18.

6. Policy Specifics

1. The University does not routinely monitor or generally restrict the content of material transported across those networks, but reserves the right to limit access to its computing and networking systems when applicable University policies or codes, contractual obligations, or state or federal laws are violated.

2. The University does not routinely monitor the content of material posted on University-owned computers, but reserves the right to remove or limit access to material posted on University-owned computers when applicable University policies or codes, contractual obligations, or state or federal laws are violated.

6.1 Specific Examples of Internet Policy Violations

Violations of this policy may involve, but are not limited to the use of the Internet through the University of Kansas Medical Center's computing and network systems to:

Impede, interfere with, impair, or otherwise cause harm to the activities of others.
Download or post to university computers, or transport across university networks, material that is illegal, proprietary, or in violation of university contractual agreements.
Conduct non University related commercial activity without prior approval from the Executive Vice Chancellor or his designate.
Harass, threaten, or otherwise cause harm to a specific individual or groups of individuals.
Display or transmit words, images or sounds that are offensive to a reasonable person except as may be appropriate in the educational, research, or clinical contexts. Typically, exceptions would involve a faculty member or other person teaching or doing research about the behaviors as opposed to participating in them for other purposes.
Display or transmit words, images or sounds that denigrate individuals because of their race, sex, age, gender, national origin, sexual orientation, or other groups protected by nondiscrimination laws and policies except as may be appropriate in the educational, research, or clinical contexts. Typically, exceptions would involve a faculty member or other person teaching or doing research about the behaviors as opposed to participating in them for other purposes.

Caution: The University protects expression by members of its community. It does not see its role as an arbiter of what may be regarded as offensive by some members of the community. However, the University may decide that certain material directed to individuals or classes of individuals presents a hostile environment warranting restrictive actions, including possible disciplinary action.

7. Reporting Alleged Internet Use Policy Violations

To report a suspected violation of this Internet use policy, contact the Information Resources Department Security Administrator.

8. Potential Consequences of Internet Use Policy Violations

Suspected or known violations of this Internet use policy will be reported to the appropriate University officials, and may result in:

Loss of computing privileges.
Accountability for conduct under any applicable University or campus policies, procedures, or collective bargaining agreements, including possible disciplinary action.
Prosecution under applicable statutes.

Suspected or known violations of University regulations and/or State and Federal law will be processed by the appropriate University authorities and/or law enforcement agencies.

Contact Information

For information on this policy, please contact:

Jim Bingham
Associate Vice Chancellor for Information Resources
Chief Information Officer
University of Kansas Medical Center
2100 West 39th
Kansas City, Kansas 66160
(913) 588-7300

Resources:

University of Kansas Medical Center Handbook for Faculty and Other Unclassified Staff (PDF), Professional Conduct.

University of Kansas Medical Center Appropriate Use of Information Systems Policy.

University of Kansas Medical Center Student Handbook.

State of Kansas Information Technology Executive Council Acceptable Use of the Internet.

United States Code Electronic and Communication Privacy Act of 1989, Title 18.

United States Code Computer Fraud and Abuse Act of 1986.

United States Code Telecommunications Act of 1996.

United States Code Copyright Act.

Revised October 22, 1999

top of page