Data Subject Requests

Common DSRs include requests to:

• access the personal data we hold about you

• correct or update data request deletion or erasure

• withdraw consent or opt out of communications

• object to or limit processing of your personal data

Data protection laws and data subject rights vary across data types, geographical locations, and industries. Please note that fulfillment of a DSR is not guaranteed due to legal, regulatory, or operational requirements that may affect your rights and our duties to maintain certain records about individuals. If you believe a particular privacy law applies to your DSR, please include that information along with information sufficient to verify your identity, assess the applicability of relevant privacy laws or regulations, and locate your data in our systems.

Please note that third-party privacy services that submit DSRs on your behalf via automated email typically lack the information necessary to evaluate and respond to your request. Third-party requests will be directed to submit the DSR in accordance with the “How to Submit a Request” guidance below. If we do not receive the information we request from you, we are unable to evaluate or fulfill your data subject request.

How to Submit a Request

Data Subject Requests can be submitted by completing a data subject request form or by sending an email to datasubjectrequest@uchicago.edu.

Any information provided for a DSR will be used solely for the purpose of evaluating and fulfilling your request and will not be further used or disclosed. Submitted requests should include, at minimum, the following information related to your interactions with University of Chicago:

• A clear statement of what you are requesting (for example, "Please delete all my personal data" or "Please stop sending me marketing emails").

• Any specific privacy laws or data subject rights that you believe are relevant to your request.

• Your relationship(s) or affiliation(s) with the University (e.g., applicant, current or former student, alumni, current or former employee, research participant, etc.).

• Your full name

• Email address(es) used in communication with the University

• CNetID, if applicable

• The school, division, or administrative unit you interacted with

• Your country or state of residence

Please be as specific as possible. The University maintains many independent systems across its academic, administrative, and research functions. Without knowing your relationship to the University and where your data may have been collected (e.g., through admissions, housing, HR, or a research study), we cannot accurately identify and contact the data steward(s) relevant to your request.

What Happens Next

We review your request and may contact you if we need more information to verify your identity or locate your data. If your request is valid and we are able to locate your data, we will assess whether we can fulfill it under applicable law and University policy and provide you with a response.

Contact & Questions

If you have questions or need help submitting a DSR, contact the University Privacy Office at privacy@uchicago.edu.