UC Faculty Challenge Cybersecurity Software Over Privacy and Academic Freedom Concerns

Cybersecurity Mandate Sparks Faculty Backlash

Faculty across the University of California system are mounting significant resistance against a mandatory cybersecurity software implementation that they claim threatens academic freedom and research privacy, according to reports. The dispute centers on Trellix security software, which UC administration requires on all university-owned computers and personal devices accessing certain university resources. Sources indicate the conflict has created a bitter stalemate between faculty and administrators that has persisted for over a year.

Cybersecurity Mandate Sparks Faculty Backlash
Intrusive Monitoring or Essential Protection?
Academic Freedom Under Threat
Administrative Response and Faculty Countermeasures
Formal Opposition and Administrative Stalemate
Ongoing Implementation Despite Protests

Intrusive Monitoring or Essential Protection?

University officials maintain that Trellix is essential for defending against increasing digital threats, particularly following a 2020 ransomware attack that cost UC San Francisco $1.14 million. According to the report, the UC president’s office established the mandate in response to federal and state legal requirements and to maintain affordable cybersecurity insurance. A university spokesperson reportedly stated that failure to comply could result in penalties up to $500,000 per security incident and increased insurance costs.

However, faculty argue the software represents unacceptable surveillance. Analysts suggest Trellix’s capabilities include collecting file names and browser history while having remote file removal authority. The software’s participation in the federal Joint Cyber Defense Collaborative, which facilitates information sharing between private companies and government agencies, has intensified concerns about potential data access by federal entities.

Academic Freedom Under Threat

“Putting this kind of software on our machines completely obliterates our ability to speak and think freely in our academic communities,” communication scholar Lilly Irani of UC San Diego stated in the report. Faculty fear the software could expose sensitive research, health data, and valuable innovations to government scrutiny.

Kevork Abazajian, a cosmologist at UC Irvine, expressed concern that Trellix’s “root access” privileges could allow administrators or government agencies to view anything on faculty computers without warrants. The report indicates these concerns are amplified by Trellix’s own security history, as the company (formerly FireEye) was compromised during the 2020 SolarWinds cyberattack that affected numerous federal agencies.

Administrative Response and Faculty Countermeasures

University administrators have attempted to reassure faculty about privacy protections. Van Williams, UC’s vice president for information technology services, referenced the university’s Electronic Communication Policy that “strictly prohibits administrators from accessing user content without due process, such as a warrant.”

Despite these assurances, sources indicate many faculty remain unconvinced. Some UC Irvine professors have reportedly resorted to teaching from “burner laptops” or virtual machines to avoid installing Trellix on their primary devices. The report states that unionized employees, including postdocs and graduate students, were exempted from the requirement because implementing it would have required separate contract negotiations.

Formal Opposition and Administrative Stalemate

The controversy has triggered substantial formal opposition across the UC system. In June, the Academic Senate passed a resolution with an 82% supermajority demanding an immediate halt to Trellix implementation. This was followed by petitions signed by over 1,000 faculty members and multiple letters to administration.

However, the report indicates the UC president’s office has declined to issue further statements on the matter and will not respond to the faculty’s August letter. This decision has reportedly shaken faculty confidence in the Academic Senate’s effectiveness and pushed some toward considering unionization for tenured faculty, who currently lack collective bargaining representation.

Ongoing Implementation Despite Protests

Despite the widespread opposition, all ten UC campuses have proceeded with Trellix implementation, though with varying policies. UC San Diego requires the software on both university-owned and personal devices accessing “trusted resources,” while UC Irvine mandates it even for routine access to platforms like Canvas and employee timesheets.

Organizers of the resistance movement say their fight continues. “We certainly intend to keep the pressure up,” Claudio Fogu, director of UC Santa Barbara’s Italian program, stated in the report. A UC spokesperson reportedly acknowledged the complexity of the situation and expressed commitment to continued dialogue with faculty, describing it as “a complex matter that requires nuanced, continuous conversation.”