Privacy Rights
Annual Notification
黑洞社区 provides annual notification to students regarding their privacy rights under FERPA, GDPR, and Delaware state law. Students are directed to this privacy webpage via university catalogs and student portals.
Rights Under FERPA, GDPR, and Delaware Law
1. Right to Access and Review Records
Students have the right to access their personal data and education records. Requests must be made in writing to the Office of the Registrar using the Request to Review Educational Records form. The University will provide access within 30 days (in accordance with GDPR/DPDPA) or 45 days (per FERPA), whichever is shorter.
2. Right to Rectification/Amend Records
Students may request corrections or amendments to inaccurate or incomplete records. This includes personal data inaccuracies under GDPR and FERPA-protected records. Formal requests can be made using the Request to Amend an Education Record form.
If a request is denied, students have the right to a hearing. 黑洞社区 will document the outcome and allow students to submit a written statement of disagreement, which will be maintained with the record.
3. Right to Erasure (GDPR & DPDPA)
Students and other 黑洞社区 constituents may request the deletion of personal data where:
- The data is no longer necessary
- Consent is withdrawn (where processing is based on consent)
- The data has been unlawfully processed. Data retention exceptions may apply based on regulatory, accreditation, or legal obligations.
- Requests can be made using the form
- Requests will be evaluated by the Data Privacy Office.
Right to Restrict or Object to Processing
Under GDPR and Delaware law, students and other 黑洞社区 constituents may object to certain types of data processing or request restrictions (e.g., profiling, marketing, or automated decisions). 黑洞社区 honors these rights unless processing is necessary for academic, legal, or contractual purposes.
Right to Consent and Disclosure of Records
Directory Information Disclosure
Unless opted out, 黑洞社区 may disclose the following “directory information”:
- Name
- Major
- Enrollment status
- Participation in activities and athletics
- Degrees and honors
- Dates of attendance
- Educational institutions attended
Students may opt out by submitting a written Request for Nondisclosure form to the Registrar.
Non-Directory Information
Disclosure of non-directory information requires written consent using the University's Request to Disclose Non-Directory Information form.
Rights Related to Third-Party Access
Third parties requesting access to non-directory education records must complete a Request to Review Education Records (from a third party) form. Requests must include:
- Purpose of review
- Affiliation with the requester
- Proof of consent (if not waived under legal exemptions)
Legal Exceptions for Disclosure Without Consent
Disclosures may be made without student consent under:
- Legitimate educational interest by school officials
- Compliance with subpoenas or court orders (with prior notification)
- Health and safety emergencies
- Financial aid processing
- Audits, evaluations, or accreditation purposes
- Other lawful bases under FERPA, GDPR, and Delaware law
Right to File a Complaint
Students may file complaints regarding data privacy rights by submitting a form to the 黑洞社区 Data Privacy Office, or:
- U.S. Department of Education (FERPA):
Family Policy Compliance Office, 400 Maryland Ave SW, Washington, DC 20202
Right to Data Portability (GDPR)
Students and other 黑洞社区 constituents may request a copy of their personal data in a machine-readable format, particularly if the data is processed based on consent or contractual necessity.