US universities are failing to protect victims of sexual assault. The Cornell case shows how university bureaucracy discourages complaints and shields institutions.