UA GDPR Compliance Program

The University of Alabama currently is developing a GDPR compliance program. Representatives from a variety of areas across campus have convened a working group to establish priorities and develop compliance tools.  If you or your area would like to be a part of this effort, please contact cera@ua.edu for inclusion.

See the UA GDPR Review for an overview of the GDPR requirements and UA’s compliance efforts.  Updates to these efforts will be posted here.  Currently this group is working to:

  • Develop a risk-based GDPR compliance strategy.
  • Plan how UA will meet key GDPR compliance requirements.
  • Prepare the university to adequately respond to questions and requests related to GDPR.
  • Begin implementation of prioritized GDPR requirements.
  • Develop recommendations for an ongoing, sustainable GDPR compliance program.
  • Develop GDPR compliance resources for use by the university community, including:
    • Privacy notices.
    • Consent documents.
    • Contract guidance.
    • Data mapping guidance.

Many of our existing contracts, agreements with third party vendors, or other collaboration agreements may be impacted by this new regulation.  As a result, you may see an increase in requests for contract addendums, data protection addendums or agreements, attestations, or other such documents from existing contractual partners. It is important that these documents are reviewed by the appropriate parties to ensure that the University can comply with these new regulations.  To facilitate this, Compliance, Ethics and Regulatory Affairs (CERA) will coordinate weekly meetings with Legal and Office of Information Technology officials to review such documents and to recommend any modifications needed.  To that end, please direct any contract addendum request, data protection addenda  or agreements, attestations, or such documents related to GDPR to cera@ua.edu  so that they may be subjected to a review prior to executing the agreement.   Please note if the review is time sensitive.  The review group meets weekly, typically on Thursdays at 3:30pm, to facilitate rapid returns.