TCR-IT-004: Acceptable Use Policy (AUP)

Summary

Defines acceptable and unacceptable use of TCR’s IT resources (computers, networks, internet, email, software, hardware). Applies to all users: faculty, staff, post-secondary students, high school students, and anyone else accessing TCR IT resources.

Why it exists

The AUP exists to keep the IT environment supporting TCR’s educational mission while protecting the college and its community from legal and security risk. Without a shared baseline for what’s acceptable, one user’s misuse (illegal activity, malware, harassment, data leaks) can put everyone else’s access and data at risk.

Policy

General principles

• Respect intellectual property (copyright, trademarks, patents).
• Respect the privacy and confidentiality of information accessed through TCR IT resources.
• Comply with all applicable laws, regulations, and TCR policies.
• Protect your account/password, report security incidents, and don’t compromise TCR IT resources.

Acceptable use

Educational, research, and institutional purposes: accessing learning materials, academic research, communicating with peers/faculty, and college-sanctioned activities.

Social media

Staff may use social media within TCR/district guidelines for instructional purposes. Staff are discouraged from communicating with students via personal social media or texting, and must protect students’ health, safety, and emotional well-being, and preserve the integrity of the learning environment. Disruptive online/electronic conduct may lead to disciplinary action up to termination.

No expectation of privacy

TCR-owned devices are for educational purposes and college business. Staff have no expectation of privacy on college technology devices; TCR may monitor, inspect, copy, review, and store usage at any time without prior notice. All material accessed/received through TCR devices remains property of the district.

Public records

Electronic communications sent/received by TCR employees may be a public record subject to disclosure under the Colorado Open Records Act, and are monitored to ensure proper retention, archiving, and destruction under applicable law.

Prohibited use

• Illegal activity of any kind.
• Malicious activity: malware, unauthorized access attempts, or anything harming TCR IT resources or other users.
• Accessing, distributing, or storing offensive, obscene, or sexually explicit material.
• Unauthorized sharing of sensitive information, including personal data and confidential college information.
• Commercial use not approved by TCR.

Enforcement

Violations may result in disciplinary action up to and including suspension, expulsion, termination of employment, and legal action. TCR may limit or revoke IT resource access to prevent further unauthorized or harmful activity.

Report violations or ask for clarification: help@tcr.edu / (970) 874-6534.

Legal references

• 20 U.S.C. 6751 et seq. (Enhancing Education Through Technology Act of 2001)
• 47 U.S.C. 254(h) (Children’s Internet Protection Act of 2000)
• 47 C.F.R. Part 54, Subpart F (Universal Support for Schools and Libraries)
• C.R.S. 22-87-101 et seq. (Children’s Internet Protection Act)
• C.R.S. 24-72-204.5 (monitoring electronic communications)

Notes

Two plain-language signature summaries exist for acknowledgment purposes rather than as separate policies: a general staff/student summary and an iPad-specific summary (for TCR-issued iPad users). Both restate this policy’s “what you can/can’t do” in short form for signing, and reference Populi, Canvas, and Google services as the platforms accessed with TCR credentials.

For TCR-issued devices with device-specific care, security, and return requirements (including clinical-program HIPAA considerations), see Device Acceptable Use Policy.

Digitized from TCR-IT-004 - AUP Policy [Rev 1.0].docx, TCR-IT-004a - AUP Policy [Rev 1.0] - Signable.docx, and TCR-IT-004b - AUP Policy [Rev 1.0] - Signable _ iPads.docx; the originals are kept under source/policies/ in this repo.