Privacy at RIT

RIT, One Lomb Memorial Drive, Rochester, New York 14623, will be the primary controller for your personal data. In addition, other RIT global entities may control or process your personal data to the extent we are required or permitted by law to share your personal data with them for the purposes described below.

Personal data and other details about you that you supply as part of the student application or registration process, as an RIT student or alumni, or that are collected by us when you use the RIT network and its affiliated websites (collectively, “Services”) are used to provide you with Services and information. You have chosen to provide us with this information in connection with receiving Services and we will use that information to provide you with any such Services.

Furthermore, we will process your personal data as required in connection with your interactions with RIT, for the following purposes:

Applicants and Inquiries:

• Informing you about studies at RIT, student life, enrollment process, brochures and other promotional materials by using telephone, post and electronically, including but not limited to email, text messaging and social media posts;
• Advising you about scholarship and financial aid opportunities;
• Administering your application to RIT and assigning you your RIT University ID number;
• Assessing your eligibility to apply for studies with RIT and complying with relevant laws and regulations set by federal and state entities and other accrediting and regulatory bodies as applicable (e.g., NCAA);
• Security purposes, including ensuring integrity and security of and controlling access to our premises, secured websites and applications websites; and
• Monitoring and assessing compliance with RIT policies and standards.

Students:

• General student administration, including monitoring enrollment, facilities/classroom planning, course schedules, course assignment, grade processing and other education related activities;
• Advising you about Scholarship and Financial Aid opportunities;
• Advising you about Study Abroad and Erasmus opportunities;
• Contacting you about your billing and financial aid, including outstanding dues or overpayments;
• Career planning and development, cooperative education employment opportunities, guidance for employment opportunities, communication with your employers to ensure proper cooperative education grading;
• Academic advising to ensure proper academic guidance during your studies at RIT;
• Supporting your engagement with the RIT Community, including but not limited to your engagement with clubs and other RIT organizations;
• To evaluate and improve programs offered at RIT;
• Advising you and your families about upcoming college events, student life, Study Abroad/Erasmus opportunities (direct communication, email, social media, and via printed newsletter);
• Providing notice and information relating to any potential academic or disciplinary actions which may be commenced against you;
• Providing health services through RIT’s Student Health Center;
• Security purposes, including ensuring integrity and security of and controlling access to our premises, IT and communication systems, platforms and secured websites and applications websites and other systems or facilities (including monitoring by camera or other means of surveillance), investigating, preventing and detecting security threats, fraud, theft or other criminal or malicious activities;
• Legal and other regulatory or compliance purposes, such as state and federal recordkeeping and other record retention obligations, NCAA compliance, etc.; and
• Monitoring and assessing compliance with RIT policies and standards.

Alumni:

• General alumni networking database administration, including gathering your contact information, workplace data and additional education information;
• Advising you about further education opportunities at RIT;
• Advising you about career opportunities, career planning and development;
• Advising you about scholarship and financial aid opportunities;
• Contacting you about outstanding financial obligations;
• Advising you about benefits programs and other activities that are essential for Alumni Association functioning;
• Security purposes, including ensuring integrity and security of and controlling access to RIT premises, information technology and communication systems, platforms and secured websites and applications websites and other systems or facilities (including monitoring by camera or other means of surveillance), investigating, preventing and detecting security threats, fraud, theft or other criminal or malicious activities;
• Legal and other regulatory or compliance purposes, such as archive and record keeping obligations; and
• Monitoring and assessing compliance with RIT policies and standards.

Employees, applicants for employment, and former employees (including retirees):

• Informing you about employment opportunities at RIT;
• Administering your employment application;
• Assessing your employment eligibility and complying with relevant laws and regulations set by federal and state entities and other accrediting and regulatory bodies as applicable.
• Administering payroll and other benefits related to your current or past employment at RIT;
• Administering your employment;
• Security purposes, including ensuring integrity and security of and controlling access to RIT premises, secured websites and applications websites; and
• Monitoring and assessing compliance with applicable laws, regulations, and RIT policies and standards.

Processing is either necessary for RIT’s performance of RIT’s obligation for the Services, or necessary for purposes of RIT’s legitimate interest. RIT’s legitimate interests, however, do not override your interests or fundamental rights and freedoms. In addition, use of your personal data may be based on your express consent given to RIT.

Subject to applicable law, RIT reserves the right to send you certain communications, such as service announcements, administrative messages, and other communications relating to the Services.

Where you have provided your explicit consent or as otherwise required in pursuit of a legitimate business interest of RIT, your name, email address, and contact number may be used to provide you, or permit selected third parties to provide you, with information about services we feel may interest you. You may unsubscribe from the receipt of this information.

Unless otherwise agreed to by you, we will collect only personal data which is required in connection with our relationship with you for the above-stated purposes. For applicants, students, and alumni such personal data collection typically includes the following categories:

• Personal details, such as name, address, date of birth, emergency contact details, gender, country of residence, citizenship, and tax related details if necessary;
• Information about your high school studies and previous college records including grades and information regarding any disciplinary processes;
• Degree continuation related information processed in connection with your enrollment or voluntarily provided by you, such as alternate email addresses, information about your personal and professional life, etc.;
• Identification documentation, such as copies of your passport, driving license, national or work ID card, or other documentation required by law (which may include photographs of your face);
• Professional details where applicable or necessary to assist in your career development;
• Data relating to access to and use of our systems, facilities and premises including, but not limited to, data generated through monitoring by camera or other means of surveillance;
• Data relating to any travel for RIT purposes;
• Data relating to your Student Life activities (e.g., RIT club participation);
• Data relating to your academic studies and activities at RIT (e.g., information provided during classes and courses, academic support center and related services, etc.); and
• Other data that RIT may be required to collect pursuant to applicable laws and regulations.

Categories of data collected for employees, applicants for employment, and former employees (including retirees) typically include the following categories of data:

• Name, address and contact details, including email address and telephone number, date of birth and gender;
• Details of your qualifications, skills, experience and employment history, your nationality, eligibility to work in the US (such as copies of your passport, driving license, tax information, or other documentation required by law (which may include photographs of your face) and criminal background information;
• The terms and conditions of your employment, including but not limited to:
  • Wage or salary information, including details about your bank account;
  • information about your benefits such as eligibility, periods of leave taken by you, including vacation, sick/personal leave, other forms of leave (e.g., paid family leave);
  • assessments of your performance, including appraisals, performance reviews, performance improvement plans and any disciplinary or grievance procedures in which you have been involved, including any warnings issued to you and related correspondence;
  • information which RIT may need to make a reasonable accommodation (e.g., religious or disability); and
  • data relating to any travel for RIT purposes that is considered business travel.
• Information about your marital status, next of kin, dependents and emergency contacts;
• Data relating to access to and use of our systems, facilities and premises including data generated through monitoring by camera or other means of surveillance;
• Demographic information related to RIT’s obligations under applicable law; and
• Any other data that RIT may be required to collect pursuant to applicable laws and regulations.

We will collect your personal data primarily directly from you through direct communication. However, some personal data may also be collected from your application(s) through online portals and social media (e.g., Facebook, Instagram, LinkedIn, etc.) or from other third-parties with whom RIT contracts for services.

For further information on cookie data set or collected by RIT websites, please refer to RIT’s Cookie Statement.

RIT will maintain physical, electronic and procedural safeguards in accordance with data protection requirements to protect your personal data from unauthorized access or intrusion. These safeguards include implementing specific technologies and procedures designed to protect your privacy, such as secure filing cabinets, servers, firewalls and SSL encryption.

We may share your personal data with:

• RIT subsidiaries and affiliates if and to the extent required for legally permitted purposes. In such cases, RIT subsidiaries and affiliates will use the personal data for the same purposes and under the same conditions as outlined in this Privacy Statement;
• Third parties who process your personal data on their own behalf but in connection with a service provided to us;
• Service providers and data processors, domestically or abroad (e.g. webmasters, human resources providers, finance database providers, student database providers, workplace safety advisors, cloud providers, etc.) instructed to process personal data for legally permitted purposes on RIT’s behalf and in accordance with RIT instructions. RIT will retain control over and will remain fully responsible for your personal data and will use appropriate safeguards as required by applicable law to ensure the integrity and security of your personal data when engaging such service providers and data processors;
• Public or governmental bodies, enforcement authorities, attorneys or courts when required to do so by applicable law, regulation or request in compliance with a legal obligation or for the establishment, exercise or defense of legal claims; and
• Third parties to whom you direct or give us permission, when we are required by applicable law, regulations or judicial or official request to do so, or when we suspect fraudulent or criminal activities.

If you are a European Union resident, you may request access to, rectification, erasure or restriction of processing of your personal data, subject to applicable European Union law. You may also have the right to object to processing or request data portability and request a copy of the personal data that we hold about you.

For any of the above requests, please send a description of your personal data stating your name, your date of birth and your place of birth as proof of identity to the contact details below. We may require additional proof of identity to protect your personal data against unauthorized access. We will carefully consider your request and may discuss with you how it can best be fulfilled.

If you have given us your consent for the processing of your personal data you can withdraw the consent at any time with future effect, i.e. the withdrawal of the consent does not affect the lawfulness of processing based on the consent before its withdrawal. However, if you withdraw such consent, RIT may no longer be able to offer you all of the Services. In case consent is withdrawn by you, we may only further process the personal data where there is another legal ground for the processing.

If you have any concerns about how your personal data is handled by us or wish to raise a complaint, you can contact us at the contact details below to have the matter investigated. If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the competent data protection supervisory authority in your country.

As a general principle, you voluntarily provide us with your personal data. However, in certain circumstances we are required to collect certain personal data for legal purposes, for example because this personal data is required to be able to complete a contractual relationship, including your education or for other Services. In these cases, if you do not provide us with your personal information, we may be unable to provide you Services such as, but no limited to, administering your application/enrollment, assign certain tasks to you or permit you to participate in certain activities or services offered in connection with your studies or other interactions with RIT.

If you are a European Union resident, RIT will delete your personal data when it is no longer reasonably required for business purposes or you withdraw your consent (where applicable), provided that we are not legally required or otherwise permitted to continue storing such data. RIT will not delete your personal data where it may be retained for the public interest, scientific or historical research purposes or statistical purposes. Please refer to our data retention policies for further details.

RIT’s web systems contain links to external sites run by third parties. RIT makes no warranty, expressed or implied, regarding the content or information collection practices of such external sites. This Privacy Statement only applies to RIT.

While all attempts are made to provide accurate, current, and reliable information, RIT recognizes the possibility of human and/or mechanical error. Therefore, RIT and its officers and employees make no representations as to the accuracy, completeness, or suitability of the information provided by this website, and deny any expressed or implied warranty as to the same.

This Privacy Statement was last updated in April 2026. We reserve the right to update and change this Privacy Statement from time to time in order to reflect changes in the way in which we use your personal data or for changing legal requirements. Any amended Privacy Statement will apply from the date it is posted on RIT website or otherwise made available to you.

If you have any questions regarding your rights or if you have any specific requests relating to your personal data please contact us at:

RIT’s Privacy Contact: dataprivacy@rit.edu