...

Finally, business data is shared only with those who need it to do University business, and it may be protected by additional laws and regulations.

Exceptions

...

This policy must be overridden if it is in conflict with any law or University policy. More specific policies for particular systems and agreements/contracts with third parties will also supplant this default retention periods of this policy.

Exception to the privacy provisions, however, must be approved by the ICI advisory board, and requests should be sent to the ICI director

...