TAGS: first destination, case study, ethics, principles, privacy
by the Principles for Ethical Professional Practice Committee
Scenario: The career center is charged with the collection of first-destination survey data for the university. A report, featuring aggregated data, is compiled and shared with various parties at the institution. The director of the center is contacted by development officers and the director of alumni relations who would like to meet and discuss the results of the first-destination survey.
During the meeting, the development officers indicate that they would each like to receive the raw data from the survey. They would like to use this information to target both the recent graduates themselves, as well as the employers of the graduates, as potential donors. The director of alumni relations states that she would like to use this information to update contact information of recent graduates in the alumni database. As officials of the institution they feel that they should have access to the data that are collected by the career center since the data are essential to other functions of the institution.
The invitation to complete the survey indicates that responses will be kept confidential. The aggregated outcomes are compiled in a report and shared with leadership at the institution. The only data reported publicly indicates the number of degrees conferred and responses that follow the National Association of Colleges and Employers (NACE) protocols and standards. However, it is not clearly defined if or how the data will be shared with other areas of the institution.
Questions: Who owns the data, and what does it mean for it to be kept confidential?
Is it appropriate for the director of the career center to withhold the raw data from other departments?
Should the career center comply with this request because of the potential increase in alumni engagement, recruiting, and donations to the university?
Is the request allowable since the invitation does not explicitly state to participants who will have access to the data?
Analysis: The director of the career center understands that sharing the data with development and alumni relations colleagues can be beneficial to the institution; however, graduates completed the survey with an expectation of privacy based upon the language set forth in the survey. The invitation to complete the survey does not clearly define who will have access to the student data once it is collected and states that such information shall remain confidential.
Principles That Apply:
Options for Resolution: Given the level of ambiguity in the survey information provided to the students, the career center should err on the side of being conservative and decline the initial request. If the career center desires to disclose such information in the future, the language in the survey should be changed to define who will be provided access to the results of the survey and the personal data included therein. The following best practices should be considered:
1. The career center must determine who owns and has access to the data collected. The career center director must determine if the director has the authority to make this determination, or if institutional policy or culture allows the data to be made accessible to other university units.
2. The career center should consult with general counsel to ensure all possible actions comply with FERPA and all other laws and regulations.
3. If sharing data, the career center should determine if the complete data set or only partial data will be shared. The career center should also consult with the Institutional Review Board (IRB) on best practices for the institution.
4. If sharing data, the career center should clearly state in writing to each party seeking the data, through written agreement, which data points will be shared, how the data can be used (i.e., the data can only be used in aggregate or cannot be used for direct solicitation/fundraising), that the data cannot be disclosed to any additional third parties, and that the individuals who receive the data will comply with all confidentiality requirements and state, federal, or local laws; statutes; or regulations pertaining to the data disclosures.
Other Considerations: For future years, if determined that the data will be shared, the career center should state in the survey invitation how the data will be used and who the data will be potentially disclosed to. Terms such as “aggregate” should be defined in layman’s terms. For instance, the following sample statement could be added to the invitation:
How does reporting your post-graduate status help XYZ University?
Survey respondents could be given the option to share personally identifiable information with university officials outside the career center. For example, students could be supplied with the following:
I understand that the information I provide will be used in the aggregate to assess graduation outcomes (employment, graduate school, and such) and provide information to accrediting agencies.
Please indicate below if your information can be used for other XYZ University purposes.
Posted October 2018
Percent of staff time spent student-facing
Median number of students to professional staff member
Median square footage of the career center
Percent of career centers with employer partnership programs
Percent frequently discussing career readiness competencies with faculty
2018-19 Career Services Benchmark Survey