KU News Release

KU launches investigation into release of personal data

UPDATE 4:30 p.m., Sept. 19— The University Daily Kansan has provided the university with the packets of personal information that it received in the mail. This will allow the university to quickly investigate the unauthorized release of those records.

LAWRENCE – The University of Kansas today launched an investigation into the unauthorized release of personal information and records to area media and is pledging to take all necessary steps to protect the private information of students, faculty and staff.

“We’ve been informed that personal documents and records were sent to the media, along with allegations of improper handling of private information. The protection of private data is critical, which is why we’ve started an investigation into where these records came from and what changes need to be made to ensure a similar breach doesn’t occur again,” said Lynn Bretz, director of University Communications.

The unauthorized release reportedly came in the form of two separate manila envelopes covered with stamps mailed on Sept. 17 to area media outlets by anonymous parties claiming to be current or former university employees.

According to an unsigned letter, only a portion of which the Lawrence Journal-World shared with the university, the records all originated in the mathematics department and were taken from trash and recycling receptacles in university offices and from other locations on campus.  

The investigation will be led by a team of KU officials from the Provost’s Office, the College of Liberal Arts and Sciences and Human Resources and Equal Opportunity.

KU is seeking the immediate return of these records so they can be properly safeguarded and so a full investigation can determine what steps need to be taken to ensure the protection of private data. At this  time, the one news organization – the Lawrence Journal-World – known to be in possession of these private records has refused to return them to the university, the proper custodian of these federally protected records, and has not provided a complete copy of the anonymous letter.

To the university’s knowledge, none of the individuals whose personal information is apparently in the possession of the Journal-World have given the Journal-World or any other media permission to retain the records.

“Obviously the sorts of records that are in these packets are private and should have been protected. Safeguarding personal information is a priority at KU, which is why we hired a privacy officer two years ago and why an enhanced information protection effort involving a number of university offices was announced this month by the provost,” said Bretz. “These records need to be properly protected, plus they are critical to our investigation as to how to prevent similar situations from occurring in the future, so we hope they will be returned promptly.”

Anyone who has any knowledge about this breach of  privacy, or any other instance of private records not being properly protected, should immediately contact Jane Rosenthal, KU’s privacy officer, at  (785) 864-9528.

-30-

The University of Kansas is a major comprehensive research and teaching university. University Relations is the central public relations office for KU's Lawrence campus.