The University of Chicago Privacy Office provides institutional oversight and guidance on protecting the privacy and confidentiality of personal information entrusted to the University. We support the University’s research, instructional, and administrative missions by helping units identify and manage privacy risk, ensure compliance with applicable laws and policies, and use data responsibly.

We help units, departments, faculty, staff, researchers, and data stewards across the University understand their responsibilities when working with personal data to ensure personal data is collected, used, shared, and retained appropriately. The Privacy Office manages the University Privacy Program, which supports the University’s compliance with applicable data privacy laws, regulations, policies, and standards.

Core Services

The Privacy Office provides the following core services:

• Development and maintenance of University privacy policies and standards

• Privacy impact assessments

• Privacy incident investigation and response

• Support privacy compliance for University activities

• Coordination of data subject requests

• Privacy training

Contact the Privacy Office if you are:

• Planning a new system, tool, or process involving personal data

• Changing how personal data is collected, used, or shared

• Unsure whether a planned data use is appropriate

• Reporting a suspected privacy incident or unauthorized disclosure

• Making a data subject request