This paper outlines the information security and privacy challenges that exist within the national postsecondary education data infrastructure. It also introduces key language related to information security and privacy in order to provide a common lexicon to frame data protection discussions, describes the general technology architectures considered in the national postsecondary education data infrastructure, summarizes big data information security and privacy concerns, and outlines information security and privacy best practices that could be used to protect data within the national postsecondary education data ecosystem.