Privacy and GDPR

General

• In accordance with University policy, a Mosaic site is provisioned by default with a Footer link to the University's central website privacy policy. 

Site Owner responsibilities 

• It is the responsibility of a Site Owner to manage information compliance in accordance with the guidance given at https://compliance.admin.ox.ac.uk/staff-guidance. (Refer to Site Owner responsibilities in the Mosaic SLA.)
• A Site Owner needs to consider:
  • if their site requires an alternative privacy notice. The Footer link should be updated to go to a custom page on their Mosaic site.
  • if they need to ask for Consent as a basis to capture and process private information on their webforms. This privacy statement can be included as part of the webform design. Example text can be found on the Mosaic Contact page.

• It is the responsibility of a Site Owner to comply with cookie legislation. Refer to the Mosaic Cookies documentation.

Further resources

• The Mosaic team can not answer questions about privacy and GDPR compliance. Please contact the University's Compliance team.
• Join the Data Protection Network.
• Individual units may have their own data protection specialist you can contact.