Re: GDPR Question

[Ben Marsden <bmarsden () SMITH EDU>]

expanding a bit (and with the standard IANAL caveat, it is my evolving
understanding that...),  the regulation also states that EU citizens living
abroad (ie, outside EU-covered states) are NOT covered by the regulation
while they remain abroad.  Ie. ex-pats aren't covered, so your faculty
members who may have EU citizenship but live & work at your US-based
institution are not covered by GDPR (erm, unless they go visit the homeland
and then exchange PI covered data while there).

  yes, ymmv ...

On Mon, Jan 8, 2018 at 11:09 AM, Brian T. Huntley <bhuntley () clarkson edu>
wrote:

> Hi Jim -
>
> Most everything I've seen and council advice we've received would indicate
> that a US student studying abroad would indeed be entitled to protections
> under the GDPR.
>
> In fact, some have gone so far as to suggest that based on the somewhat
> vague definition in Article 3:  "...data subjects who are in the Union..."
> would include anyone who was physically within the bounds of the EU -
> whether expat, resident, citizen or "just visiting".
>
> YMMV though, so definitely worth engaging your GC to get their take and
> enable your senior management to make an informed risk decision about the
> whole thing.
>
> Brian
>
>
> --
> Brian T. Huntley
> Director of Network Services and Information Security
> Office of Information Technology
> Clarkson University
> 315.268.6723 <(315)%20268-6723>
>
> On Mon, Jan 8, 2018 at 9:50 AM, Pardonek, Jim <jpardonek () luc edu> wrote:
>
> > Good Morning,
> >
> >
> >
> > We have been having some discussions regarding what population’s records
> > are subject to GDPR.  The discussion centers around whether or not the
> > records of US citizens that study abroad fall under GDPR.  Some say it’s
> > only those who are citizens of the EU.  Is there any guidance on this topic?
> >
> >
> >
> > Thanks and have a great day.
> >
> >
> >
> > Jim
> >
> >
> >
> > *James Pardonek, MS, CISSP, CEH*
> >
> > *Information Security Officer*
> >
> >
> > * Loyola University Chicago  1032 W. Sheridan Road | Chicago, IL
> > <https://maps.google.com/?q=1032+W.+Sheridan+Road+%7C+Chicago,+IL%C2%A0%C2%A060660+%0D+*+%0D+(**:+(773*&entry=gmail&source=g>
> > <https://maps.google.com/?q=1032+W.+Sheridan+Road+%7C+Chicago,+IL%C2%A0%C2%A060660+%3Chttps://maps.google.com/?q%3D1032%2BW.%2BSheridan%2BRoad%2B%257C%2BChicago,%2BIL%25C2%25A0%25C2%25A060660%2B%250D%2B*%2B%250D%2B(**:%2B(773*%26entry%3Dgmail%26source%3Dg%3E+%0D+*+%0D+(**:+(773+%3Chttps://maps.google.com/?q%3D1032%2BW.%2BSheridan%2BRoad%2B%257C%2BChicago,%2BIL%25C2%25A0%25C2%25A060660%2B%250D%2B*%2B%250D%2B(**:%2B(773*%26entry%3Dgmail%26source%3Dg%3E*&entry=gmail&source=g>60660
> > <https://maps.google.com/?q=1032+W.+Sheridan+Road+%7C+Chicago,+IL%C2%A0%C2%A060660+%0D+*+%0D+(**:+(773*&entry=gmail&source=g>
> > *
> > * (**: (773
> > <https://maps.google.com/?q=1032+W.+Sheridan+Road+%7C+Chicago,+IL%C2%A0%C2%A060660+%0D+*+%0D+(**:+(773*&entry=gmail&source=g>)
> > 508-6086*
> >
> >
> >
> > *Loyola University Chicago will never ask your for your username or
> > password.*
> >
> > *For the lastest information security news at Loyola, please follow us
> > online,*
> >
> > *Twitter: @LUCUISO*
> >
> > *Facebook: https://www.facebook.com/lucuiso/
> > <https://www.facebook.com/lucuiso/>*
> >
> > *Our Blog http://blogs.luc.edu/uiso/ <http://blogs.luc.edu/uiso/>*
> >
> >
> >
> > *From:* The EDUCAUSE Security Constituent Group Listserv [mailto:
> > SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *Joanna Grama
> > *Sent:* Monday, October 2, 2017 9:16 AM
> > *To:* SECURITY () LISTSERV EDUCAUSE EDU
> > *Subject:* [SECURITY] October 24 GDPR Webinar from Tambellini Group and
> > EDUCAUSE
> >
> >
> >
> > Good morning,
> >
> > Many of us continue to struggle with understanding the scope and finer
> > points of the EU GDPR and its application to US higher education
> > institutions. To that end, EDUCAUSE and the Tambellini Group have been
> > working together to share more information on this topic and we are pleased
> > to announce an upcoming webinar that you may be interested in.
> >
> >
> >
> > The jointly sponsored webinar will be held on Tuesday, October 24, 2017,
> > from 1-2pm ET.  You can register for the webinar and read more about the
> > webinar content here:  https://marketing.thetambellin
> > igroup.com/acton/media/10722/gdpr-and-us-higher-education-
> > institutions-webinar
> >
> >
> >
> > As GDPR questions have been coming up on our various EDUCAUSE lists, we
> > have been sharing those questions with the Tambellini group so that they
> > can be specifically addressed in the upcoming webinar.
> >
> >
> >
> > Kind regards,
> >
> > Joanna
> >
> >
> >
> > *(This message has been cross posted on the EDUCAUSE security, privacy,
> > and IT GRC discussion listservs.)*
> >
> >
> >
> > *Joanna Grama, JD, CISSP, CRISC, CIPT*
> > Director of Cybersecurity and IT GRC Programs
> >
> >
> >
> > *EDUCAUSE*
> > *Uncommon Thinking for the Common Good*
> > 282 Century Place, Suite 5000, Louisville, CO 80027
> > <https://maps.google.com/?q=282+Century+Place,+Suite+5000,+Louisville,+CO+80027&entry=gmail&source=g>
> > direct: 720.406.6769 <(720)%20406-6769> | cell: 720.507.5983
> > <(720)%20507-5983> | jgrama () educause edu
> >
> >
> >
> > *Become a Member**- Everyone at your organization is an EDUCAUSE member
> > when you join* | Access discounts, resources, and valuable peer networks
> > | Discover membership
> > <https://www.educause.edu/about/discover-membership>


-- 
[}--> BEWARE of links and attachments in email!   *  Stop, Think before you
click *
============================================
Ben Marsden : Information Security Director, CISSP
ITS, 201 Stoddard Hall, Smith College, Northampton, MA 01063
---------------------------------------------------------------------
=--> Any request to reveal your Smith password via email is fraudulent!