Policy Statements

Harvard University is committed to protecting the information that is critical to teaching, research, and the University’s many varied activities, our business operation, and the communities we support, including students, faculty, staff members, and the public. These protections may be governed by legal, contractual, or University policy considerations.

Everyone at Harvard has a responsibility for proper handling and protection of Harvard confidential information and Harvard systems as set out in the Policy Statements. These policies apply to the entire Harvard community including faculty, staff, and students. Each policy is supported by Requirements that describe what must be done to be in compliance. Specific implementation steps are described in the How-Tos that accompany the Requirements.

  • "Harvard confidential information" refers to non-public information of any level that Harvard manages directly or via contract. 
  • "Harvard systems" means Harvard-owned, Harvard-purchased, or Harvard-managed systems, whether on Harvard premises or through contracted Cloud-based service. 

For questions about policy interpretation, assistance with implementation steps or to find out about information security services that are offered at Harvard, contact ithelp@harvard.edu.

Harvard is equally committed to preserving an environment that encourages academic and research collaboration through the responsible use of information technology resources. Find out about  the Harvard Research Data Security Policy (HRDSP) and associated guidance in support of Harvard's research mission.

Policy Statements