Abstract This white paper explores the legal landscape for IT security in higher education and the factors contributing to an atmosphere of uncertainty. The paper prepared by a Washington, D.C., law firm presents an overview of federal and state privacy and security related laws affecting institutions of higher education. The paper then discusses several practical implications of such laws for institutions of higher education and suggests areas for further exploration.