Data Protection and Privacy Policy

All employment policies

1. Purpose

To protect the personal data of students, staff and others, and to ensure it is collected, used, stored and shared lawfully, fairly and securely.

2. Scope

This policy applies across Future University in Egypt — all faculties, the Dental Hospital, the training Pharmaceutical Factory, student housing and administrative units — and to students, faculty, staff and, where stated, contractors and suppliers.

3. Definitions

Personal data

Information relating to an identified or identifiable individual.

Data breach

A security incident leading to unauthorised access to, loss of, or disclosure of personal data.

4. Policy statement

• The University processes personal data only for legitimate purposes, with an appropriate legal basis, and keeps it accurate and secure.
• Individuals are informed about how their data is used and may exercise their rights over it as provided by law.
• Personal data is shared with third parties only where lawful and under appropriate safeguards.
• Staff and students handling personal data must comply with this policy and applicable law.

5. Procedures

1. Records of the personal data held, its purpose and its retention are maintained and reviewed.
2. Access to personal data is restricted to those who need it, with technical and organisational security measures in place.
3. Requests by individuals to access or correct their data are handled within the timeframes set by law.
4. Personal-data breaches are contained, assessed and reported as required.

6. Roles and responsibilities

• Data Protection Officer — oversees compliance and handles requests.
• Information-system owners — apply security and access controls.
• Staff and students — handle personal data responsibly.

7. Related policies

• Code of Professional Ethics and Conduct
• Financial Transparency Statement
• Research Ethics and Integrity Policy

8. Legal and cultural alignment

Grounded in Egypt's Personal Data Protection Law (Law 151/2020) and NAQAAE expectations on information management. It supports trustworthy handling of academic, health (Dental Hospital) and research data.

9. The policy in practice

The University applies this policy in its day-to-day work. Examples, by academic year, include:

Academic year 2020/2021

• 2020 — the University applied it through its role as academic sponsor of the 2030 Green Cities strategic forum.

Academic year 2021/2022

• 2021 — the University applied it through its Student Union elections held by electronic voting.

Academic year 2024/2025

• November 2024 — the University applied it through a cybersecurity awareness session on challenges and precautions.

Academic year 2025/2026

• December 2025 — the University applied it through the opening session of its Model Egyptian Parliament through the 'Wa3y' event.

Together these show the policy at work across the University’s teaching, research and community life.

10. Monitoring and review

Reviewed at least every three years, or sooner if Egyptian law, regulations of the Supreme Council of Universities, or THE/accreditation requirements change. The policy owner is responsible for monitoring how it is applied.

Document control