...
Responsibility for the information being shared between a campus and a service provider continues past the initial authentication and (if applicable) authorization transaction. While specific legal and policy guidelines may vary between countries or regions, types of activities (e.g., banking, health), or even types of data (e.g., government funded research, personal information), some basic best practices will always often apply.
Campus: DO protect your identity data.
...