Overview
Metropolitan State University of Denver celebrates innovation and encourages University students, faculty, and staff to explore the capabilities of emerging technologies, including Generative AI platforms (henceforth abbreviated as ‘AI/ML’), which offer the ability to improve research, augment administrative procedures, and deliver novel educational experiences. At the same time, the University must ensure these tools are deployed in an ethical manner and must safeguard sensitive data, including student records, protected health information (PHI), employment data, and other personally identifiable information (PII). Privileged University data is governed by a range of federal, state, and international laws, including but not limited to:
- Family Educational Rights and Privacy Act (FERPA)
- Health Insurance Portability and Accountability Act (HIPAA)
- Payment Card Industry Data Security Standard (PCI DSS)
- General Data Protection Regulation (EU GDPR)
- Colorado Privacy Act (CPA)
- California Consumer Privacy Act (CCPA)
- Gramm-Leach-Bliley Act (GLBA)
The attached document is intended to support the MSU Denver community as it pursues AI/ML solutions in a secure, privacy-focused manner.
Please review the document in depth to learn more about the scope this document applies to, key principles and guidelines for the use of Artificial Intelligence and Machine Learning platforms at MSU Denver.
Microsoft Copilot
Microsoft Copilot is an AI-powered chat tool available to all MSU Denver students, faculty, and staff. Please see our Microsoft Copilot service page for more information, including how to access it securely in the MSU Denver computing environment.
Requests to Implement New AI/ML Solutions
If an individual or department wishes to introduce a new AI/ML product to the MSU Denver technology environment, it must first be evaluated for compliance and privacy. This process may be initiated by submitting a ticket to IT Services.
Modifications & Exceptions
This statement will be updated as the subject continues to evolve and new, germane information arises. In the interim, any individual or department seeking an exception from these guidelines must submit a written request by submitting a ticket to IT Services, which will be circulated with the appropriate data stewards for review and approval.