Loyola University Chicago

GDPR @ Loyola

GDPR FAQ

Q: If I am an EU citizen but live in the US, will the GDPR apply to my personal data?
A: The GDPR will only apply to the personal data collected from you while you are living in or travelling to the EU. Any personal data collected outside the EU will not be subject to the GDPR.

Q: I am a US Citizen and I will be going to study abroad at the JFRC in the fall, will GDPR apply to me?
A:  Yes.  Any personal data collected about you while you are in Rome will be subject to the GDPR. 

Q: Will I be able to edit my personal data myself?
A: Yes. You will be able to edit certain personal data (e.g., home address) through your student and staff portals or other methods offered to you by LUC, but will not be able to edit restricted personal data (e.g., name, grades, and social security #) unless you believe the personal data is incorrect. In that case, you will be able to follow the university's approved methods to make a change request to have it corrected.

Q: Will I be able to request to be "Forgotten"?
A: The nature of data that LUC collects is subject to the legal and regulatory requirements in the US, including a longer retention period. However, we may allow you to request to erase certain data where there LUC doesn't have a legal justification for keeping it.

Q: Will I be able to request LUC to send my personal data to another institution?
A: LUC already has a process to transfer your personal data (academic transcripts, job verification etc.) to the requestor with your approval. Please click here to request such personal data.

Q: Will Loyola have a Data Protection Officer (DPO)?
A: No, Loyola has determined that based on the GDPR requirements, a designated DPO role is currently not required. Contact information for the GDPR Controller is provided in the privacy notice and posted on this page.

Q: What is the legal age to get a parental consent?
A: The legal age for obtaining parental consent in the EU is 16. 

Q: How long does Loyola retain my personal data?
A: It depends on the nature of the data and our legal obligations to the local regulations. Loyola will take necessary steps to purge personal data that is no longer required.

Q: I am an international student from Africa. Why is my personal data not handled  in accordance with GDPR?
A: All LUC personal data is managed according to the US privacy regulations (e.g., FERPA) which requires strict measures to ensure privacy of our students' and staff data. We believe that the existing methods to protect privacy of personal data at LUC follows industry best practice.

Q: Who do I contact if I have question related to GDPR?
A: You can contact the GDPR Controller via email at gdpr@luc.edu.