UC Google Contract
The University of California has a contract with Google that provides assurances regarding the security and privacy of customer information stored on Google’s systems. UC's contract with Google takes precedence if there is a conflict with Google's posted terms or policies.
As part of adopting Google Apps for faculty and staff use, UC updated its 2008 Google contract originally set up for student deployments. This contract covers areas of concern to higher education and specifically to research institutions.
CORE APPS: UCSC faculty, staff, and students have access to UCSC Core Google Apps (Email, Calendar, Drive, Groups, Sites, Hangouts, Classroom, Vault). Our core Google Apps are governed by a contract between the University of California and Google. UCSC Core Google Apps are FERPA compliant.
Here are some of the key issues that are included in the UC/Google contract and terms of service:
- UCSC owns our content, Google has no ownership rights. Google may store our data in any of their international data centers.
- Google agrees to "reasonable security standards" and will have standard audits done. They will notify us about any security breach of our data.
- We are responsible for responding to third-party requests for UC information received by us or Google. Google will notify us about requests it receives for UC information, to the extent permitted by law.
- No ads - the default setting is No Ads for faculty, staff and students though Google may serve ads to they do to alumni if UC moves them to another domain.
- Google does scanning and indexing as part of offering the services like searches, anti-virus and spam management.
- UC agrees to use "commercially reasonable" efforts to ensure that its users comply with Google's Acceptable Use Policy, Google does not monitor UC activity looking for violations of its Acceptable Use Policy. Google will notify us if something comes to their attention - similar to how we handle our Allowable Use Policy (Section III of the Electronic Communications Policy).
- Google can suspend accounts if there has been a material breach of the service agreement and UC does not take action.
- No fees - for the initial term of the agreement, there are no fees for the service, though Google may offer premium services for a fee.
- Google agrees to comply FERPA requirements as a "school official" consistent with FERPA's definitions.
Given that the contract is nine pages, this information is just a high level summary. The complete contract between UC and Google is available to the UC community at: http://www.ucop.edu/cloud-services-contracts/contracts-guidance/gae.html