Re: [Micronet] Google Analytics

This year the Campus Information Security and Privacy Committee has chosen to make privacy a key focus area. Google Analytics will be discussed in future meetings and it is likely the committee will arrive at some recommendations for campus, which will be shared with UCOP. We also plan to discuss the privacy and security implications of cloud computing (in its various forms), as well as offsite software as a service, hosting, and professional services that require offsite campus data.

If you are interested in providing input or helping CISPC think through some of these things, we'd love to hear from you. Please drop an email to me, or our Vice Chair, Ryan Means.

Thanks,
Bill Allison
(chair, CISPC)

-----Original Message-----
From: "Karen Eft" <kareneft_at_berkeley.edu>
Date: Friday, Sep 26, 2008 11:09 am
Subject: Re: [Micronet] [Webnet] Google Analytics
To: <webnet-list_at_berkeley.edu>, "'micronet'" <micronet-list_at_lists.berkeley.edu>
CC: itpolicy_at_berkeley.edu

All,
>There is not yet "clear legal guidance" nor have exceptions to Regential Procurement policy been granted for campus departments to use such products.
>
>Since it is not completely clear whether "software-as-a-service" products such as this fall under "Procurement" regulations when they are "FREE", and recognizing that the flood of demand to use these products is overwhelming, here are some recommendations. If YOU choose to go ahead and click on the Internet site to obtain and use such free products (possibly thereby
>agreeing to terms that indemnify that company from any potential damages you incur, such as losing or compromising the privacy of your data), at least do the following:
>
>- don't receive, process, store, or publish sensitive data;
>
>- publish a privacy statement compliant with the campus-required privacy statement*, including a statement saying that you are using the ___ product for ___ purposes and also pointing your site users to the product's own detailed privacy statement;
>
>- don't sponsor interactive communications features without publishing (and enforcing) terms and conditions that enable you to remove communications posing potential harm to the University, such as libelous statements, hate speech, etc.
>
>In particular regarding Google Analytics: note that the "sharing of your site user statistics with Google" is reportedly a feature that can be disabled when you configure Google Analytics, so that the usage statistics will only be available for your local use. You'd need to ask technical folks how to do that.
>--Karen Eft
>
>* http://technology.berkeley.edu/policy/online.html#stmt
>
>
>Karen E. Eft (510) 642-4095
>IT Policy Manager, UC Berkeley
>Office of the CIO: Security, Privacy and Policy
>2195 Hearst, Berkeley, CA 94720-4878
>http://technology.berkeley.edu/policy/
>
>-----Original Message-----
>From: webnet-list-bounces_at_lists.berkeley.edu
>[mailto:webnet-list-bounces_at_lists.berkeley.edu] On Behalf Of Rune Stromsness Sent: Thursday, September 25, 2008 9:19 PM
>To: Susan Hedgpeth
>Cc: webnet-list_at_berkeley.edu; 'micronet'
>Subject: Re: [Webnet] [Micronet] Google Analytics
>
>Susan Hedgpeth wrote:
> Hi all,
>
> At yesterday's Micronet presentation about the redesign of
> www.berkeley.edu <http://www.berkeley.edu/>, Steve McConnell mentioned
> that he has been using Google Analytics to get important information
> about how users are using their site. I've heard others on these lists
> say they find that tool useful as well.
>
>I had heard that UC campuses were either strongly advised against using
>Google Analytics or outright prohibited from doing so on some campuses.
>
>I've heard that various campus lawyers have determined that:
>
>* The terms of service that you have to agree to in order to use Google
>Analytics violate standing orders of the Regents in terms of liability
>and that no campus official can agree to them without approval from the
>Regents.
>
>* That the Google privacy policy isn't strict enough to pass muster with
>state laws on privacy of information gathered about people browsing our
>web sites.
>
>Our department has asked for guidance from campus policy people a couple
>of times on a clear answer on whether the appropriate official here says
>"yes, it is allowable" to use Google Analytics, or says "no, you are
>prohibited" from using Google Analytics. But we've never actually
>gotten a clear answer. Has anyone else gotten official approval for
>agreeing to the Google terms of service from procurement & business
>contracts of the campus counsel's office or some other authority? (Or
>been told clearly that they aren't OK?)
>
>
>Rune
>
>> I wonder if I am the only one who has tried to use Google Analytics
> (it's very appealing because it's free!) but I just can't get
> comfortable with it. I find it confusing and hard to use - I never know
> if what I'm looking at is really what I think I'm looking at (does that
> make sense???).
>
> Could this perhaps be a subject for an upcoming Webnet or Micronet
> meeting - a tutorial on how to use it to get basic information about a
> website. Anyone out there who would be willing to give a presentation?
>
> What do others think of this idea?
>
> -Susan
>
>
>
> Susan Hedgpeth
> Web Coordinator
> Career Center, University of California, Berkeley
> 2111 Bancroft Way #4350, Berkeley, CA 94720-4350
> phone: (510) 642-8093 - fax: (510) 643-6120
> email: hedgpeth@berkeley.edu - website: http://career.berkeley.edu
>
> <http://career.berkeley.edu/>*Career Center
> *career counseling < internships < jobs < graduate school services <
> serving freshmen through PhDs & alumni
>
>
> ------------------------------------------------------------------------
>
>
> -------------------------------------------------------------------------
> The following was automatically added to this message by the list server:
>
> To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
>
> http://micronet.berkeley.edu
>
> Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet. This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
>
>--
>Rune Stromsness
>Systems Supervisor
>Senior Systems Administrator
>Network & Infrastructure Services
>Residential and Student Service Programs IT
>University of California, Berkeley
>runes_at_berkeley.edu
>510-643-8052
>
>------------------------------------------------------------------------ The following was automatically added to this message by the list server:
>-
>Webnet information is available at http://webnet.berkeley.edu. Email sent to this list is archived at http://ls.berkeley.edu/mail/webnet/ . This archive is open to the general public and browsable by search engine spiders, email-address harvesting robots, your bosses, etc.
>
>
>
>------------------------------------------------------------------------- The following was automatically added to this message by the list server:
>
>To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
>
>http://micronet.berkeley.edu
>
>Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet. This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

------------------------------------------------------------------------
The following was automatically added to this message by the list server:
-
Webnet information is available at http://webnet.berkeley.edu. Email sent to this list is archived at http://ls.berkeley.edu/mail/webnet/ . This archive is open to the general public and browsable by search engine spiders, email-address harvesting robots, your bosses, etc.
Received on Fri Sep 26 2008 - 13:41:35 PDT