Data Protection & Student Privacy

Google Workspace for Education Compliance

International University of Erbil is committed to protecting student data and maintaining compliance with Google Workspace for Education requirements, FERPA, COPPA, and GDPR standards.

FERPA Compliance

We comply with the Family Educational Rights and Privacy Act (FERPA), which protects the privacy of student education records.

Student Rights Under FERPA:

  • Right to inspect and review education records
  • Right to request amendment of inaccurate records
  • Right to consent to disclosure of personally identifiable information
  • Right to file complaints with the U.S. Department of Education

Contact for FERPA inquiries: registrar@iue.edu.krd

COPPA Compliance (Children Under 13)

We comply with the Children's Online Privacy Protection Act (COPPA). Our services are not directed to children under 13 unless through authorized educational programs with verifiable parental consent.

Parental Consent Requirements:

  • Parental consent required for students under 13
  • Parents may review, request deletion of child's information
  • Parents may refuse further collection of child's data
  • Limited data collection for educational purposes only

Google Workspace for Education Data Usage

We use Google Workspace for Education to provide educational services. Here's how student data is handled:

What We Do

  • Use data for educational purposes only
  • Encrypt data in transit and at rest
  • Provide student/parent data access
  • Comply with data deletion requests

What We Don't Do

  • Sell or share student data
  • Use data for advertising
  • Create user profiles for non-educational purposes
  • Track students across websites

Google Services Used:

Gmail Google Drive Google Classroom Google Meet Google Docs/Sheets/Slides

Data Retention & Deletion

Retention Period:

  • Student records: Retained for 7 years after graduation/departure
  • Google Workspace data: Retained during enrollment + 1 year
  • Applicant data: Retained for 2 years if not enrolled

Data Deletion Process:

  • Students/parents may request data deletion at any time
  • Requests processed within 30 days
  • Some records retained as required by law
  • Confirmation provided upon completion

To request data deletion, contact:

privacy@iue.edu.krd
+964 0751 010 1553

Third-Party Services & Data Sharing

We only share student data with authorized third-party services that are essential for educational purposes and comply with our privacy standards.

Authorized Third-Party Services:

Service Purpose Data Shared
Google Workspace Email, collaboration, storage Name, email, academic content
Learning Management System Course delivery Name, ID, grades, assignments
Student Information System Academic records Registration, transcripts, records

Security Measures

Encryption

TLS 1.2+ for data in transit, AES-256 for data at rest

Access Control

Role-based access, multi-factor authentication

Monitoring

24/7 security monitoring and incident response

Student & Parent Rights

Right to Access: View all personal data we hold
Right to Correct: Request correction of inaccurate data
Right to Delete: Request deletion of personal data (with legal exceptions)
Right to Export: Receive copy of data in portable format
Right to Opt-Out: Opt out of non-essential data collection
Right to Complain: File complaints with data protection authorities

Contact Us

Privacy Officer

Data Protection Team

privacy@iue.edu.krd.iq

support@iue.edu.krd.iq

info@iue.edu.krd

+96407507169400

+96407510101553

+96407518795555

+96407708795555

IUE, next to Paki Hospital, Newroz St, Irbil, Iraq

Registrar's Office (FERPA)

Academic Records

registrar@iue.edu.krd.iq

For urgent security concerns, contact our 24/7 security hotline: security@iue.edu.krd.iq

Last Updated: November 9, 2025

Privacy Policy | Terms of Service