
University Privacy Office
At the University of Kansas, we are committed to protecting privacy and ensuring the responsible handling of personal information. Our Privacy Program is designed to safeguard individual rights while fostering an environment of trust and security.
Our Office
Ensures privacy compliance across healthcare, research, and academics at the University of Kansas by leading adherence to regulations, developing policies, aligning privacy with IT security, providing training, advising on best practices, and overseeing continuous monitoring and incident management.
Our Guiding Principles
We adhere to the following privacy principles to responsibly handle personal data throughout its lifecycle:
- Collection Limitation: We only collect necessary personal data through lawful and fair means.
- Data Quality: We strive to keep personal data accurate, complete, and up to date.
- Purpose Specification: We clearly state the reasons for personal data collection at the time of collection.
- Use Limitation: Personal data is used only for limited and specified purposes, unless individual's consent otherwise or as required by law.
- Security Safeguards: We implement reasonable security measures to protect personal data.
- Openness: We maintain transparency about our personal data practices and policies.
- Individual Participation: Individuals have the right to access and correct their personal data as required by law.
- Accountability: We hold ourselves accountable for adhering to these principles
What is Privacy?
Privacy is the fundamental right to be left alone and to maintain control over your personal information. At our university, we recognize several domains of privacy:
1. Bodily Privacy: Protecting a person’s physical being and any invasion thereof.
2. Territorial Privacy: Safeguarding personal and environmental space from intrusions.
3. Communication Privacy: Ensuring the protection of the means of correspondence.
4. Data Privacy: Responsibly managing personal data entrusted to our institution.
What is Personal Data?
Personal data refers to any information that can identify or relate to an individual, ranging from direct identifiers like names, addresses, and biometric information (such as fingerprints or facial recognition data) to less obvious data such as IP addresses or coded information. This concept encompasses a wide spectrum of information in various formats, including written, photographic, and audio-visual content. It also covers sensitive categories like health records, genetic information, and political views.
The definition of personal data can vary depending on context and applicable laws, spanning multiple sectors such as education, finance, and healthcare. Importantly, even seemingly innocuous information may become identifiable when combined with other data. Understanding the scope of personal data is important for ensuring compliance with privacy laws and safeguarding individual rights in an increasingly data-driven world.