ACLU
AUP/NCP
February 2004

What is the Acceptable Use Policy and the Network Connection Policy (draft)?

The Acceptable Use Policy governs the use of Brown-owned technology and technology on Brown's campuses. It was created this summer, a great deal in order to smoke out peer-to-peer file sharing devices like Kazaa, which Brown had a problem with last spring. The AUP tells technology users (students, staff, faculty) what they can and can't do with Brown technology, and for what behavior they will be sanctioned. The AUP governs file access (either on server/personal computer).

The Network Connection policy (draft) was created to regulate the use of network traffic (ie, AIM traffic, email received/sent). This is good because the AUP did not contain mention of how officials intended to monitor traffic.

Why are they controversial?

The AUP and NCP is problematic because it allows CIS officials to access student files and network traffic WITHOUT PROVIDING THE STUDENT WITH TIMELY NOTIFICATION. It will be burdensome to notify students every time their file is accessed for maintenance purposes. But if accessed during the process of investigation for disciplinary purposes (and only under reasonable suspicion), timely notification is important to allow students to prepare for a disciplinary process (ie, seek legal advice, do research, etc).

Also, AIM and email sniffing is troublesome prima facie because of free speech issues, and so the policy outlining traffic regulation should be clear and fair.

What is being done?

The Undergraduate Council of Students has appointed two students to the Computing Advisory Board (CAB), which is meeting late in February. Ostensibly, the CAB is intended to provide a mechanism of undergraduate representation in policy-making process, which is good.

What other CIS policies are relevant?

Procedures for Registering Network-Based Services
Guidelines for Network Modification

Where can I get more information?

www.brown.edu/Students/ACLU
http://www.brown.edu/Facilities/CIS/policy/