TCR-IT-004a: Device Acceptable Use Policy

Summary

Covers TCR-issued devices specifically (as distinct from the general Acceptable Use Policy): issuance, care, security, damage/loss reporting, and return requirements. The device remains TCR property throughout.

Why it exists

Issued devices carry program-specific risk beyond general acceptable use, including clinical-program requirements (HIPAA, patient information) where students may handle sensitive data on TCR hardware. This policy sets device-specific expectations so students know what they’re responsible for from issuance through return.

Policy

Student responsibilities

• Maintain reliable internet access for coursework.
• Have basic computer skills sufficient for Canvas, email, and assignment submission.
• Complete the Technology Use Agreement before the device is issued.

Device care

• Protect the device from damage; use the provided charger.
• Transport in a padded bag or sleeve; never leave in a vehicle or unattended in public.
• Keep food/drinks away from the device.
• Don’t remove, deface, or alter asset tags, serial numbers, or institutional labels.
• Don’t attempt repairs, disassembly, or third-party servicing.

Security

• Use a strong passcode/password and enable screen lock.
• Never share account credentials.
• Apply OS/software updates when prompted.
• Don’t disable security software, device management, or tracking features.
• Report lost or stolen devices to IT immediately.

Damage, loss, and reporting

Report damage, malfunction, or loss within one business day to help@tcr.edu / (970) 874-6534. Don’t attempt independent hardware/software fixes. Students may be held financially responsible for loss or damage from negligence, misuse, or failure to report promptly.

Appropriate use and public records

• Issued for educational and program-related purposes only.
• Prohibited: illegal activity, malware/unauthorized access, offensive/obscene material, sharing confidential or patient-related information without authorization, commercial use for personal gain.
• Must comply with all TCR policies, HIPAA requirements, and clinical site technology rules.
• Do not photograph, record, or store patient information on the device unless expressly authorized.
• Electronic communications may be monitored; public records are retained, archived, and destroyed per applicable law.

Software

Don’t install unauthorized software or bypass device management restrictions. Program-required applications are installed or made available by TCR IT.

No expectation of privacy

TCR-owned devices may be monitored, inspected, and reviewed at any time without prior notice. All material accessed or stored on the device remains TCR property.

Return of device

Devices must be returned at program end in good working condition with all accessories (charger, case, adapters). Failure to return may result in a hold on records, transcripts, or certification, and TCR may pursue recovery of replacement costs.

Enforcement

Violations may result in disciplinary action up to and including removal from the program and revocation of device and network access, as well as suspension, expulsion, termination of employment, or legal action where applicable.

Legal references

• 20 U.S.C. 6751 et seq. (Enhancing Education Through Technology Act of 2001)
• 47 U.S.C. 254(h) (Children’s Internet Protection Act of 2000)
• 47 C.F.R. Part 54, Subpart F (Universal Support for Schools and Libraries)
• C.R.S. 22-87-101 et seq. (Children’s Internet Protection Act)
• C.R.S. 24-72-204.5 (monitoring electronic communications)

Notes

Digitized from TCR-IT-004a - Device AUP Policy [Rev 1.0].docx; the original is kept under source/policies/ in this repo. A duplicate copy of the same file existed in the source drop and was not retained separately.