There is also a bank involved that had to have given account and demographic information back to the ISU Foundation.
The ISU Foundation did something bad. The bank did something worse that may well be a violation of the Gramm-Leach-Bliley privacy regulations.
Huh? Why would the bank have to give such info back to the ISU Foundation?
All money comes into the ISU Foundation, and then the Foundation allocates the money as requested by the donor to the entities that are under the umbrella of the Foundation. I'm sure the Foundation must have a database to manage which donors belong to which organizations. The Foundation tells the bank to run the cards, and might provide them a description tag for the transaction.
How does the bank violate any laws here? The Foundation already knows which donors belong to what organizations, and all the demographic info for the supporters.
Last edited: