University Privacy Office
Saint Louis University’s privacy office serves as the central resource for privacy-related inquiries, guidance and operational support. The office assists students, faculty, staff and external partners in navigating privacy compliance, interpreting university policies, and implementing data protection practices across academic, research, health care and administrative domains.
Our office provides practical, day-to-day support by:
- Responding to privacy-related questions and concerns
- Offering consultations on privacy risks in new projects and technologies
- Helping departments understand and apply privacy policies
- Coordinating incident response and mitigation
Key Resources
Privacy Incident Reporting
Suspected mishandling of sensitive information requires immediate reporting for prompt investigation and response. Kindly report suspected privacy incidents to us at compliance@slu.edu.
Privacy Consultation Services
Our office provides privacy consultation for new projects, technologies, and initiatives that involve personal and/or sensitive data. We offer guidance to help students, faculty, and staff assess privacy risks, align with university policies, and ensure compliance with applicable regulations.
For questions or scheduling a consultation, please contact us at compliance@slu.edu.
Privacy Training Resources
The Privacy Office offers comprehensive privacy training to foster a culture of privacy protection across the community. These courses ensure that faculty, staff, and students understand their responsibilities to protect personal information effectively. To enroll in a training course or request a special session for your department, please contact the privacy office at compliance@slu.edu.
FERPA Compliance
The Family Educational Rights and Privacy Act (FERPA) is a federal law that protects the privacy of student education records. Saint Louis University maintains a comprehensive program to ensure that student records are handled appropriately and protect student privacy rights.
Saint Louis University’s official FERPA policy details how the University handles student records and upholds these rights. For all definitions, student rights, and formal processes, the registrar’s office is the primary resource. Please visit the registrar’s FERPA policy page for the most current and complete documentation.
Training and Awareness
The privacy office provides comprehensive FERPA privacy training for faculty, staff, and administrators who handle student educational records.
About the University Privacy Program
Building on its operational role, the University Privacy Program ensures institutional alignment with laws like HIPAA, FERPA, and other relevant privacy regulations through strategic guidance and policy development to foster a culture of ethical data stewardship.
In addition to policy and compliance leadership, the Privacy Program supports the university community through:
- Training: Role-specific privacy education for students, faculty, and staff.
- Privacy Site Visits: On-site assessments and consultations to strengthen privacy practices.
- Contract and business associate agreement (BAA) support.
- Service on the Institutional Review Board Research Committee: Active participation in privacy governance for research.
Frequently Asked Questions
SLU collects personal information needed for education, research, health care and administration, such as student records, employee data, and health records. We only collect what is necessary for legitimate university purposes. Please see our privacy notice and notice of privacy practices.
Access is restricted to university staff who have a legitimate educational or business need to see it, following the principle of minimum necessary access.
The Family Educational Rights and Privacy Act (FERPA) gives students specific rights over their educational records. The University registrar's office manages all aspects of FERPA compliance. For complete details on your rights, parent access, and how to manage your directory information, please visit the registrar's FERPA policy page.
Research participants are protected through informed consent, Institutional Review Board (IRB) oversight, and strict data protection measures outlined in our policies.
Suspected privacy incidents should be reported immediately to the privacy office at compliance@slu.edu. Take steps to contain the incident, if possible, and please document all details to assist with the investigation.
Yes, the university will notify affected individuals if a breach occurs when required by law or when it is in the individual's best interest, in line with our policies and regulations.
You can reach the privacy office by email at compliance@slu.edu or by phone during regular business hours. We are here to help with policy questions, compliance requirements and individual rights.