U.S. colleges and universities possess an exceptional volume and variety of personal information about students, employees, and others, yet they continue to lag behind industry, government, and higher education institutions in other countries in voluntarily protecting that information.