Last item for navigation

What should I do if I get a question about the EU or UK GDPR or China’s PIPL?

You or your unit may get questions from persons in the European Economic Area (EEA), the UK, or Mainland China, asking how to request personal information they believe the U of I may hold about them or to have any such information deleted. To be sure the U of I is responsive to their requests, please read the guidance below before responding to a GDPR or PIPL-related inquiry. Knowing the definitions of the following two terms will help you understand the guidance.

Inquiries: Oral questions or requests, usually by telephone, relating to the EU or UK GDPR or China’s PIPL.

Rights Request: A written request in any form (e.g., letter, email) requesting information or seeking action and citing the EU or UK GDPR or China’s PIPL as a basis for the request.

Guidance

All Rights Requests received by U of I units should be immediately forwarded to GDPRrequest@uillinois.edu unless the request seeks information or action the unit would normally provide or approve.

If the Rights Request seeks information or action the unit would normally provide or approve, the unit will:

• Follow its existing procedures to provide the information or approve the action; and
• Notify the University Ethics and Compliance Office that a Rights Request was received and the action taken. If the volume of Rights Requests is significant, a summary of the number and type of Rights Requests approved each month may be submitted instead of notifying the University Ethics and Compliance Office after each response.

All other Rights Requests, including requests that the unit would normally reject and requests that seek information or action beyond the unit’s purview, must be forwarded to GDPRrequest@uillinois.edu for resolution. Accordingly, units must not indicate to the requestor whether the U of I has the requested information or whether the U of I can or cannot provide or delete it.

Units receiving Inquiries may respond as follows.

• Thank you for contacting the [your office, department or unit].
• The University of Illinois takes privacy seriously, including its obligations under applicable international privacy laws.
• If you have general questions about how to submit a request under the General Data Protection Regulation or China’s Personal Information Protection Law (PIPL), please see the University of Illinois Supplemental Web Privacy Notice at http://go.uillinois.edu/GDPR or https://go.uillinois.edu/SupplementalPrivacyNotice-PIPL [you can email the links to anyone requesting them.] 
• If you wish to submit a GDPR or PIPL request or you have specific GDPR or PIPL questions, please contact University of Illinois System Ethics and Compliance Office:

Email:  GDPRrequest@uillinois.edu

Telephone:  +1 866-758-2146

Address:  University Ethics and Compliance Office
Human Resources Building, Room 20
One University Plaza, HRB 20
Springfield, IL 62703-5407
Attn: International Privacy Compliance