1. The license and contractual provisions
   1. The majority of the agreements are not compatible with North Dakota law; most notably, the sections of the agreement that describe and detail indemnification and jurisdiction. Most do not contain any language about what notification, if any, would occur if there would be a breach or compromise to the software, service, and/or account. These software applications and services can potentially be used inadvertently or purposefully to collect, store, and use protected information which can put the University at serious risk. 
      
      
2. Privacy concerns
   1. Many of the products and services that are designed to share information or to collect information for marketing purposes have few or no basic privacy safeguards built in to protect the user and their information. Therefore, these products may not be compliant with the Family Educational Rights and Privacy Act (FERPA) which includes educational records including course assignments and projects, and grades. Additionally, they may not be compliant with privacy laws that cover personally identifiable information, or data that is classified as confidential such as financial information, health related data, contracts and legal agreements, etc. 
      
      
3. Security issues
   1. It is important for NDSU faculty and staff to be mindful of basic security concerns associated with out students' information. Because of the open and sharing nature of many of these products and services, security standards are lacking or nonexistent. A breach could cause a compromise of students' information that is stored within that product or service. 
      
      
4. The product's intended use 
   1. The Americans with Disabilities Act (ADA) requires NDSU to provide academic adjustments and auxiliary aids and services to students with disabilities for equality of opportunity. Many of these products, while they may be a great resource and provide an effective pedagogical tool for teaching, are not ADA compliant, which has the potential to cause serious legal issues for NDSU. 
   2. Most of the products are intended only for personal use or for trial use in testing to see if they fit consumer's needs. Using them in a business or educational environment can constitute infringement and misuse which can result in litigation against the University. 

It is important to NDSU faculty and staff to provide an innovative, engaging, efficient and productive atmosphere for instructional learning and business related to the University and still is mindful of NDSU policy and procedure and all applicable federal and state regulations when creating that environment. To encourage this, when selecting a product or online service it is important to engage the General Counsel's office to review and approve the license or contract associated with that product. 

Please understand that using software or a web-based service whose contractual language contains prohibited provisions, or which could lead to a security breach or data loss, maybe considered a violation of NDSU policy and or federal and state law and could be detrimental to the scope of your NDSU employment. This could result in discipline as well as potential liability. We encourage you to seek guidance from the individuals identified below with regards to your questions. 

NOTE: The use of open source software, i.e., Linux operating systems and Apache web software, when used in a production environment and managed by IT professionals is not within the scope of these guidelines.