Supplement to the Data Privacy Notice for Daily COVID-19 Screener Use on Campus

This Notice supplements NYU’s Data Privacy Notices for Students, Employees and Vendors in the E.U. (the “Notices”) by describing the practices of NYU, with global headquarters at 70 Washington Square South, New York, NY 10012, as well as to its affiliated legal entities and branches (collectively “NYU,” “us” or “our”) with respect to COVID-19 screening.  All terms used but not defined herein will have the meanings set forth in the Notices.  You can contact the Data Protection Officer (“DPO”) or your local data protection contact as set forth in the Notices with any questions about this notice, our data collection practices, or your rights. 

Questions?

You can contact NYU’s Data Protection Officer with any questions about this notice, our data collection practices, or your rights. You can reach NYU’s Data Protection Officer, Tani Raiford, at:

Tani Raiford
c/o Data Protection Officer’s Office
10 Astor Place, room 502E
New York, NY 10003 
+1 212 998 1180 
privacy@nyu.edu

Contact information for NYU’s local data protection contacts for NYU’s EU Global Sites is provided in Annex A.

This general notice may be supplemented by additional notices at the point of any data collection.  In addition to this notice: 

• NYU’s Annual FERPA Notice provides information about your rights under the Family Educational Rights and Privacy Act
• The NYU Student Health Center Notice of Privacy Practices describes how your health information may be used and disclosed by the Student Health Center
  

If you have specific questions about any of the data processing activities described in this or any other notice, please contact the DPO.

^ Back to top

The Information We Process About You.

We process information about your health and about the health of those with whom you have been in close contact (the "Covered Information") directly through a screening questionnaire that you complete.

^ Back to top

Purposes and Legal Basis for Processing Your Data

We process the Covered Information for the purpose of determining whether it is appropriate for you to report to work (if you are an employee), for you to attend classes (if you are a student), or for you to perform services on campus (if you are a vendor), or whether you may be sick with or have been exposed to COVID-19 and should stay home to maintain a safe and healthy environment for others. The information may also be used to monitor and respond to the presence of the disease on campus and to comply with legal reporting obligations.

Our legal basis for processing the Covered Information is that we have a legitimate interest in maintaining a safe and healthy campus and in complying with laws and regulations that govern our conduct in the countries where we operate.  We may process special categories of data (i.e., health information) because such processing is necessary to protect the health and safety of our employees in the workplace and to comply with laws and regulations issued in response to the COVID-19 pandemic.

^ Back to top

Recipients of Your Personal Information

The covered information will be received only by NYU employees at the Global Site at which you are located who need access to ensure we are enforcing appropriate public health guidelines. In certain countries in which sharing results with non-medical personnel is restricted, results will only be shared directly by you when you seek to access an NYU facility. The screening questionnaire is hosted by a third party software provider who has agreed to process the Covered Information only to provide services to us and to protect your Covered Information from unauthorized use, access, or disclosure.

^ Back to top

Data Retention

The Covered Information will be retained for a period of six months.

^ Back to top

Your Rights

Your rights under GDPR with the respect to the Covered Information are set out in the Notices.  Any questions about these rights may be directed to the DPO at:

Tani Raiford
c/o Data Protection Officer’s Office
10 Astor Place, room 502E
New York, NY 10003 
+1 212 998 1180 
privacy@nyu.edu

^ Back to top

Annex A: NYU Local Data Protection Contacts

^ Back to top

Annex B: National Data Protection Authorities

This list is provided for your reference, but you may file a complaint with the data protection authority in any Member State where you habitually work, live, or believe an infringement of EU data protection law occurred. You may consult a list of data protection authorities.

^ Back to top