UC Google Contract

The University of California has a contract with Google that provides assurances regarding the security and privacy of customer information stored on Google’s systems. UC's contract with Google takes precedence if there is a conflict with Google's posted terms or policies. 

As part of adopting Google Apps for faculty and staff use, UC updated its 2008 Google contract originally set up for student deployments. This contract covers areas of concern to higher education and specifically to research institutions.

CORE APPS: UCSC faculty, staff, and students have access to UCSC Core Google Apps (Email, Calendar, Drive/Docs, Groups, Sites, Hangouts, Chat, and Mobile). Our core Google Apps are governed by a contract between the University of California and Google.

CONSUMER APPS: Additional Google Consumer Apps (Blogger, Google+, YouTube, Picasa, Reader, etc.,) are governed by a contract between YOU and Google. If you would like to use these Consumer Apps with your @ucsc.edu account, you will need to agree to Google's Terms of Service and Privacy Policy, which govern these Consumer Apps.


So what's in the UC Google Contract?

Here are some of the key issues that are included in the UC/Google contract and terms of service:

---------------

  • UCSC owns our content, Google has no ownership rights. Google may store our data in any of their international data centers.
  • Google agrees to "reasonable security standards" and will have standard audits done. They will notify us about any security breach of our data.
  • Google agrees to protect our information as they would their own. They link from the contract to the privacy policy, recently updated at: http://www.google.com/policies/privacy/
  • We are responsible for responding to third-party requests for UC information received by us or Google. Google will notify us about requests it receives for UC information, to the extent permitted by law.
  • Google agrees to let us know in advance about changes to the service or terms of the agreement. So far, examples include Google's advance notice of user interface modifications and the consolidated privacy policy.
  • No ads - the default setting is No Ads for faculty, staff and students though Google may serve ads to they do to alumni if UC moves them to another domain.
  • Google does scanning and indexing as part of offering the services like searches, anti-virus and spam management.
  • UC agrees to use "commercially reasonable" efforts to ensure that its users comply with Google's Acceptable Use Policy, Google does not monitor UC activity looking for violations of its Acceptable Use Policy. Google will notify us if something comes to their attention - similar to how we handle our Allowable Use Policy (Section III of the Electronic Communications Policy).
  • Google can suspend accounts if there has been a material breach of the service agreement and UC does not take action.
  • No fees - for the initial term of the agreement, there are no fees for the service, though Google may offer premium services for a fee.
  • Google agrees to comply FERPA requirements as a "school official" consistent with FERPA's definitions.

---------------

Given that the contract is nine pages, this information is just a high level summary. The complete contract between UC and Google is available to the UC community at: http://www.ucop.edu/purchserv/access.php