Executive Order No. 32, 9-6-02
Individually identifiable information obtained from Internet credit card transactions will not be sold, traded or rented to third parties. Aggregate or summary information that does not contain personally identifiable information may be shared, however.
Exceptions to this rule, as permitted by law, may be made with approval of the President, provided that a disclosure of the use of the information is presented at the web site as part of the privacy statement, and the participant is given an opportunity to request that their information, in identifiable form, not be shared beyond the University. Exceptions are to be reviewed by General Counsel.