This document assists IIS as they develop policies and procedures to meet legal requirements for protecting the privacy of individuals and the confidentiality of information in IIS. This describes the impact of major federal laws on IIS including HIPPA and FERPA and provides considerations for topics to include in IIS confidentiality policies.