Âé¶¹ÊÓÆµ

Privacy Rights

Annual Notification

Âé¶¹ÊÓÆµ provides annual notification to students regarding their privacy rights under FERPA, GDPR, and Delaware state law. Students are directed to this privacy webpage via university catalogs and student portals.

Rights Under FERPA, GDPR, and Delaware Law

1. Right to Access and Review Records

Students have the right to access their personal data and education records. Requests must be made in writing to the Office of the Registrar using the Request to Review Educational Records form. The University will provide access within 30 days (in accordance with GDPR/DPDPA) or 45 days (per FERPA), whichever is shorter.

2. Right to Rectification/Amend Records

Students may request corrections or amendments to inaccurate or incomplete records. This includes personal data inaccuracies under GDPR and FERPA-protected records. Formal requests can be made using the Request to Amend an Education Record form.
If a request is denied, students have the right to a hearing. Âé¶¹ÊÓÆµ will document the outcome and allow students to submit a written statement of disagreement, which will be maintained with the record.

3. Right to Erasure (GDPR & DPDPA)

Students and other Âé¶¹ÊÓÆµ constituents may request the deletion of personal data where:

Right to Restrict or Object to Processing

Under GDPR and Delaware law, students and other Âé¶¹ÊÓÆµ constituents may object to certain types of data processing or request restrictions (e.g., profiling, marketing, or automated decisions). Âé¶¹ÊÓÆµ honors these rights unless processing is necessary for academic, legal, or contractual purposes.

Right to Consent and Disclosure of Records

Directory Information Disclosure

Unless opted out, Âé¶¹ÊÓÆµ may disclose the following “directory information”:

Students may opt out by submitting a written Request for Nondisclosure form to the Registrar.

Non-Directory Information

Disclosure of non-directory information requires written consent using the University's Request to Disclose Non-Directory Information form.

Rights Related to Third-Party Access

Third parties requesting access to non-directory education records must complete a Request to Review Education Records (from a third party) form. Requests must include:

Legal Exceptions for Disclosure Without Consent

Disclosures may be made without student consent under:

Right to File a Complaint

Students may file complaints regarding data privacy rights by submitting a form to the Âé¶¹ÊÓÆµ Data Privacy Office, or:

Right to Data Portability (GDPR)

Students and other Âé¶¹ÊÓÆµ constituents may request a copy of their personal data in a machine-readable format, particularly if the data is processed based on consent or contractual necessity.