PURPOSE:
To establish procedures for handling unsolicited email, also known as "spam," and other unauthorized email such as attacks, nuisance mail, and viruses. These guidelines will assure compliance with all applicable University Policies and with state and federal laws.
PROCEDURES:
Use of email facilities for activities other than academic purposes or University business is not permitted, except insofar as such use is of an incidental, personal nature and does not place a burden on University resources. The University reserves the right to suspend the use of computing resources for any activities that are prohibited or illegal. All applicable University Policies and state and federal laws must be obeyed.
The following activities are prohibited:
1. Distribution of email that includes sexual harassment, pornographic material, or hate crimes
2. Distribution of unsolicited email for commercial purposes
3. Any activity related to email that does not comply with campus codes of conduct
4. Any email activity that interferes with the proper operation of the University computing infrastructure
5. Any email activity that may significantly reduce the ability of others to use computing resources
6. Any activity related to email that misrepresents the University
The following activities are permitted:
1. Email that is part of a class activity or research that might appear to be commercial use, and is clearly identified as a class activity
2. Email that supports the University mission
3. Email that is part of any professional activity that can be defined as academic or scholarly in nature
IT staff shall keep a list of senders of unauthorized email and classify the instance of abuse with respect to type of sender, type of email, and place of origin.
The response to the incident is determined by the previously described classification of email. Students of the University who use email in a manner that is considered illegal by California Penal Codes Section 502 may be subject to disciplinary sanctions up to and including dismissal from the Institution.
When necessary, the CIO shall determine if further action shall be taken, including legal action and recommendations to the University for Disciplinary Action.
REFERENCES:
California Business and Professions Code Sections 17538.4 and 17533.45
California Penal Code 502
University Policy for Use of Computing Resources
CSUN Information Security Policy
FURTHER INFORMATION:
Chief Information Officer (hilary.baker@csun.edu)
Approved by the President
