{"id":2565,"date":"2018-12-14T15:13:17","date_gmt":"2018-12-14T21:13:17","guid":{"rendered":"https:\/\/web.saumag.edu\/financial-services\/?page_id=2565"},"modified":"2018-12-14T22:44:53","modified_gmt":"2018-12-15T04:44:53","slug":"gdpr","status":"publish","type":"page","link":"https:\/\/www.saumag.edu\/financial-services\/gdpr\/","title":{"rendered":"EU General Data Protection Regulation"},"content":{"rendered":"<h1>EU General Data Protection Regulation Compliance Policy<\/h1>\n<p>The European Union\u2019s General Data Protection Regulation (GDPR) standardizes laws across all EU countries with the goal of protecting the data privacy of EU data subjects. This legal framework gives guidelines for collecting and processing the personal information of citizens from, or any individual currently in the European Union.<\/p>\n<p>Southern Arkansas University is committed to the privacy of all data; and in its capacity as a data controller, the university collects, uses and discloses data subjects\u2019 information according to the following policy.<\/p>\n<h3>Lawful Basis:<\/h3>\n<p>In order for the University to educate its foreign and domestic students, it is essential and necessary on a lawful basis to collect, process, and maintain the personal data of its students, employees, applicants, vendors, and others involved in its programs.<\/p>\n<h3>Scope:<\/h3>\n<p>The GDPR requires personal data to be processed lawfully, fairly, and in a transparent manner. This personal data is collected and processed for specified, legitimate purposes which include, but are not limited to admissions, registration, online education, classroom delivery, study abroad programs, grades, communications, employment, records retention, and contractual obligations. The data is retained securely only as long as deemed necessary.<\/p>\n<h3>Special Categories:<\/h3>\n<p>Special categories of sensitive data may be requested by the University. These include race, ethnic origin, health data, sexual orientation or preference, but exclude criminal offenses. Where not required by federal laws or in the interest of public health and safety, data subjects are not obligated to provide sensitive data and do so on a voluntary basis. The University makes every effort to process sensitive data only with data subjects\u2019 consent.<\/p>\n<h3>Data Security Procedures:<\/h3>\n<p>University procedures have been designed to protect the confidentiality and security of personal data. Relevant policies and procedures include but are not limited to:<\/p>\n<ul>\n<li><a href=\"https:\/\/www.saumag.edu\/its\/information\/policies\/accounts\/\">Computer Accounts<\/a><\/li>\n<li><a href=\"https:\/\/www.saumag.edu\/students\/studentlife\/conduct\/ferpa\/\">FERPA<\/a><\/li>\n<li><a href=\"https:\/\/cd3.saumag.edu\/registrar\/files\/2015\/08\/FERPA-Release.pdf\">FERPA Release Form<\/a><\/li>\n<li><a href=\"https:\/\/cd2.saumag.edu\/human-resources\/files\/2015\/05\/Health-Insurance-Plan-Document.pdf\">HIPAA and Health Plans<\/a><\/li>\n<li><a href=\"https:\/\/www.saumag.edu\/health\/policies\/\">University Health Services<\/a><\/li>\n<\/ul>\n<p><b>Data Governance:<\/b> All University personnel are assigned specific system rights to information based on job function and supervisor approval to ensure lawful basis for the collection and\/or processing of personal data.<\/p>\n<p><b>Document Retention:<\/b> The <a href=\"https:\/\/www.dfa.arkansas.gov\/images\/uploads\/intergovernmentalServicesOffice\/rec_retention_schedule.pdf\">Arkansas General Records Retention Schedule<\/a> establishes the minimum retention requirements of records commonly found in Universities. Electronic data may be stored securely beyond these minimum requirements in order to facilitate student inquiries, disputes, and audits from appropriate state, federal, and accrediting entities.<\/p>\n<h3>Consent:<\/h3>\n<p>The University must obtain affirmative consent before it collects or processes sensitive personal data. This consent is collected upon admission and with each student schedule confirmation. Withdrawal of consent is available upon request.<\/p>\n<ul>\n<li><a href=\"https:\/\/www.saumag.edu\/financial-services\/files\/2018\/12\/Consent-Form.pdf\">GDPR Consent Form<\/a><\/li>\n<li><a href=\"https:\/\/www.saumag.edu\/financial-services\/files\/2018\/12\/Consent-Form.pdf\">GDPR Withdrawal of Consent Form<\/a><\/li>\n<\/ul>\n<h3>Breach Notification:<\/h3>\n<p>Any University personnel that suspects that a breach or disclosure of personal data has occurred must immediately notify administration or one of the compliance officials listed below. After confirmation of such a breach, the University will notify individual data subjects of the incident and recommend steps that the data subject should take in order to minimize potential damages.<\/p>\n<h3>Individual Rights:<\/h3>\n<p>Subject to limitations established by legal, regulatory, and university reporting requirements, data subjects have the right to:<\/p>\n<ul>\n<li>Information about data collection processes, controllers, and third parties processors<\/li>\n<li>Access, modify, restrict, or erase their personal data<\/li>\n<li>Information regarding the University\u2019s GDPR compliance policy<\/li>\n<li>Obtain a copy of their personal data<\/li>\n<li>Discontinue direct marketing communications<\/li>\n<li>Know why certain personal data is required, and possible consequences of the failure to provide the data<\/li>\n<\/ul>\n<p>Any individual wishing to exercise their rights under this policy should contact one of the officials listed below.<\/p>\n<h3>Contacts:<\/h3>\n<p>For general questions:<br \/>\nJason Martisek, Associate Director of International Services and Admissions<\/p>\n<p>For admissions and advising records:<br \/>\nSarah Jennings, Assistant Vice President for Enrollment Services<\/p>\n<p>For student academic records:<br \/>\nSandra Walker, Registrar<\/p>\n<p>For student billing records:<br \/>\nShawana Reed, Vice President for Finance<\/p>\n<p>For alumni relations:<br \/>\nMegan McCurdy, Director of Alumni Relations<\/p>\n<p>For data security:<br \/>\nMike Argo, Director of Information Technology Services<\/p>\n<p>For personnel records:<br \/>\nRoger Giles, Vice President for Administration and Human Resources<\/p>\n","protected":false},"excerpt":{"rendered":"<p>EU General Data Protection Regulation Compliance Policy The European Union\u2019s General Data Protection Regulation (GDPR) standardizes laws across all EU countries with the goal of protecting the data privacy of EU data subjects. This legal framework gives guidelines for collecting and processing the personal information of citizens from, or any individual currently in the European&#8230; <a class=\"more-link\" href=\"https:\/\/www.saumag.edu\/financial-services\/gdpr\/\"> Read More<\/a><\/p>\n","protected":false},"author":16,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":"","_links_to":"","_links_to_target":""},"class_list":["post-2565","page","type-page","status-publish","entry"],"_links":{"self":[{"href":"https:\/\/www.saumag.edu\/financial-services\/wp-json\/wp\/v2\/pages\/2565","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.saumag.edu\/financial-services\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.saumag.edu\/financial-services\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.saumag.edu\/financial-services\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/www.saumag.edu\/financial-services\/wp-json\/wp\/v2\/comments?post=2565"}],"version-history":[{"count":0,"href":"https:\/\/www.saumag.edu\/financial-services\/wp-json\/wp\/v2\/pages\/2565\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.saumag.edu\/financial-services\/wp-json\/wp\/v2\/media?parent=2565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}