Fundamentals of GW's Privacy Program
GW established a Privacy Program that is based on a set of core privacy principles, addressing the collection, processing, transfer, deletion and other use of personal data, by the university, during the course of its operations.
GW is transparent about our privacy policies and our practices with respect to personally identifiable information (PII). We provide clear and accessible notice regarding our collection, use, maintenance, and disclosure of personal information.
Under applicable laws and to the extent practicable, GW’s may seek individual consent for the collection, use, maintenance, or disclosure of PII.
- Minimum Necessary
Limiting the collection and use of personal data to the minimum that is directly relevant and necessary to accomplish a specified purpose.
- Responsible Use
Use personal data only for the specific purposes for which it was collected (or otherwise with the explicit consent of the individual, or as authorized by law).
- Need to Know
Limit access to personal data to only those with legitimate need-to-know.
- Security Controls
GW implemented administrative, technical, and physical safeguards to protect PII commensurate with the risk and magnitude of the harm that would result from its unauthorized access, use, modification, loss, destruction, dissemination, or disclosure.
- Data Governance
GW established clear lines of responsibility with respect to givernance of the personal data processed by the university.
- Third Parties
Personal Data can be shared with third parties only under university approved contractual agreements.
- Choice and Control
GW has established procedures to provide individuals with appropriate access to their PII, and opportunity to correct or amend PII, as well as mechanisms to receive and address individuals’ privacy-related complaints and inquiries.
- Incident Reporting
Promptly report any actual or suspected privacy incidents to the GW Privacy Office.
- Accountability and Enforcement
GW schools and departments are accountable for complying with GW privacy policies and privacy laws and regulations applicable to their collection and use of PII.