麻豆传媒

Towson University defines its Systems of Record (SoR) as structured information systems that require strong protection of confidentiality, integrity, and availability that widely support the campus community.     

The university has made available the contact details for data subjects/individuals to submit requests regarding data privacy, along with the processes to manage such inquiries. 

As required by the , the university has designated the following information systems as 鈥淪ystems of Record鈥�: 

• Human Resources Information System: used for employment records.    
• Relationship Management System: used for university engagement activities.
• Student Admissions System: used for students applying to the university.  
• Student Information System: for student records.  

As an institution of higher education, Towson University鈥檚 Systems of Record (SoR) may collect and retain relevant personal information related to educational and student records (e.g., admissions applications, financial aid information, etc.), administrative purposes (e.g., payroll, background checks for employment, etc.) and university engagement (e.g., newsletters, university event attendance, etc.).  

The information may be collected directly (e.g., applying for an employment opportunity, signing up for a newsletter, etc.) or indirectly (e.g., transcripts for admissions purposes).   

Examples of personally identifiable information stored in TU鈥檚 Systems of Record include, but are not limited to the following: 

• Name
• Date of birth
• Email addresses
• Financial aid  
• Identification numbers
• Payroll data
• Phone numbers  
• Transcripts 

TU inventories its Systems of Record for the types of data stored. Before adding any new data types, data usage approval must be obtained through data governance processes. Additionally, TU follows access control procedures before authorizing the use of data. 

The university reserves the right to disclose any relevant information, including Personally Identifiable Information (PII), when required by law enforcement or to comply with a court order, law, or legal process, including responding to a government or regulatory request. Personal Information from a System of Record may be shared with local, state, and federal organizations as required such as the Maryland Higher Education Commission (MHEC), U.S. Department of Education and Middle States Commission on Higher Education (MSCHE).  

TU will not disclose PII to third parties, other than those third parties processing PII on behalf of TU, unless the Data Subject consents to the disclosure, or TU determines that disclosure of PII is in the best interest of TU.

Some PII may be subject to disclosure under the Maryland Public Information Act or other federal and state laws or regulations.

The university reserves the right to access and use PII in its sole discretion when university staff believe there is a risk to safety or to investigate actual or suspected instances of misconduct or risk to the university, students, faculty, staff, and third parties, subject to applicable law and university policy.

The university may disclose aggregated, disaggregated, anonymized, or de-identified personal information about our community.

An individual may submit data privacy requests concerning Personally Identifiable Information (PII) relating to the individual held and processed by TU. The data subject (the individual to whom the PII relates) may seek access to the PII, correction or deletion of the PII, or to opt out of sharing PII with third parties. Data subjects may submit their requests to TU鈥檚 Office of Information Security and Privacy (see the Privacy Statement for current submission instructions).  

To protect the data subject鈥檚 privacy, TU will take precautions to verify the data subject鈥檚 identity and use appropriately secure communication methods. 

TU may deny a data privacy request if it reasonably concludes that it has a legitimate basis for processing the PII or if the request is infeasible. If the data subject disagrees with TU鈥檚 decision regarding a request to change PII, the data subject will be given the option to leave a record of their change request with the original record.  

The above procedures only apply to PII within a designated System of Record.