Data, Privacy, Security & Compliance

Classification, FERPA, consent, audit trails, prompt injection, least privilege.

• Data classification and minimization for agent use (student, employee, research, operational data).
• FERPA, state privacy laws, research data protections, and vendor contractual requirements.
• Consent, transparency, and notice when agents interact with students or staff.
• Model training, fine-tuning, and retention of interaction data.
• Security posture: prompt injection, data exfiltration, privilege escalation, and agent-to-agent trust boundaries.
• Audit trails sufficient for compliance, incident response, and academic or employment investigations.