...
The CTAB provides the following ideas for what you might include:
- Link to whatever If you previously provided a link to a privacy policy you have in your Participant Operational Practices (POP ) - now deprecated), provide this link for your SP Privacy Statement URL.
- Refer to privacy policies available through the EDUCAUSE Higher Education Information Security Council (HEISC):
- HEISC Information Security Guide: https://spaces.at.internet2.edu/display/2014infosecurityguide/Privacy
- Develop a web page that links to established organizational policies related to privacy and include that URL in your metadata. These policies can include data sharing, FERPA release, acceptable use policy (AUP), among others.
...