As appropriate and feasible, the Smithsonian monitors network traffic to identify unauthorized attempts to access, upload, or change information or otherwise cause damage. Unauthorized access and/or unauthorized attempts to change information on Smithsonian Websites are strictly prohibited and punishable under the Computer Fraud and Abuse Act of 1986 and the National Information Infrastructure Protection Act. In addition to limiting access to personal information to those who have a business ""need to know"", the Smithsonian requires its service providers who help maintain or operate its Websites to contractually agree to protect the confidentiality, integrity, availability and security of the personal information. 