This Data Privacy Notice and Consent policy outlines how BYU and BYU Continuing Education and affiliates such as CE Events, LLC and HSDL, LLC ("we," "us," or "our" in this section) collect, use, store, share, and protect personal information of employees ("you" or "employee") in compliance with applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and similar state laws.
Information We Collect. We may collect data in the following categories of personal information:
- Identifiers: name, address, phone number, email address, Social Security number, driver’s license or state ID number, and employee ID.
- Employment Information: job title, department, compensation, performance evaluations, disciplinary records, time and attendance records, and benefits information.
- Financial Information: bank account details for payroll, tax information, and other benefits-related financial data.
- Device and/or Usage Information: IP addresses, login data, usage of BYU (including BYU Continuing Education) systems and networks, security badge access logs, and activity on, navigation of, and interaction with BYU websites and online services.
Device and/or usage information we collect may include automatically collected data sent by your web browser, cookies, web beacons, or similar technologies. Cookies are files placed on your computer, which help evaluate usage patterns, recall user preferences, and tailor user content. Web beacons are objects embedded in a web page to monitor user behavior. You may take steps to browse our sites anonymously, or opt-out, by changing your browser settings. However, doing so may limit your ability to use certain features of our sites.
Automatically collected data may include but is not limited to your internet protocol (IP) address, operating system, browser information, date and time of access, any referring web page you were visiting before you came to our site, your search queries, navigation, and other activities and interactions on our sites or online services.
We may collect and use this information for the purpose of administering and improving our sites and online services; contacting you to provide information that may be of interest to you; personalizing content for you; advertising our goods and services; and complying with applicable law.
We also may receive some data from third-party sources. These may include other companies providing services to us or publicly available sources of information (such as when you engage with our content on social media networks or websites).
We may also collect sensitive personal data in limited circumstances and for limited purposes such as the interactive process regarding requested accommodations, arrangements for accommodations, preparation for potential health emergencies or requests for assistance obtaining health services, facilitation of background checks, or protection of academic integrity. Sensitive personal data we may collect and process may include, but is not limited to, certain financial data, data that may be deemed biometric data, information about ethnicity or religious affiliation, and health data. We process sensitive personal data only when we have explicit consent as required or in exceptional circumstances and where we have a legal basis to do so.
Purposes for Use of Personal Information. We collect and use personal information for the following
- Recruiting, screening, interviewing, hiring, and onboarding
- Background checks
- Payroll and benefits administration
- Protection of academic integrity
- Accommodations interactive process and arrangements
- Performance management
- Compliance with legal obligations
- Preparation to respond to potential safety and security risks, concerns, and incidents
- IT and systems management
- Internal audits and investigations
Disclosure of Personal Information. We may share personal information with:
- Third-party service providers (e.g., payroll processors, benefits administrators, IT services)
- Government authorities when required by law
- Legal or regulatory bodies in response to valid requests
- Internal departments or personnel with a legitimate business need
We do not sell or share your personal information for cross-context behavioral advertising purposes.
Artificial Intelligence. We may use artificial intelligence (AI) systems and technologies, including chatbots and language models, to enhance our services and provide you with personalized experiences. AI technologies may be employed to analyze your data, assist with security, support academic integrity, assist hiring personnel, assist instructors in providing academic feedback and grading, and provide personalized support based on your interactions and preferences. Institution guidelines require AI outputs that impact individuals be reviewed by qualified personnel. Any personal data collected and/or processed during interactions with our AI systems is handled with care and in accordance with relevant data protection laws and the data handling practices outlined in this data privacy notice and consent.
Retention of Personal Information. We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law or internal policy.
Among heightened security measures we take to protect biometric data is our biometric data retention policy, which is as follows. Biometric data will be retained only as long as necessary to fulfill the purpose for which it was collected and comply with any applicable legal obligations, and no longer than 3 years from the individual data subject’s last interaction with the BYU.
SMS Communications. If you provide your phone number, we may send you SMS messages for notifications, service updates, or marketing communications. You can opt out at any time. We use trusted service providers to deliver these messages and may share your phone number with them solely for this purpose. Where required by law, we will seek to obtain your explicit consent before sending you SMS messages.
Your Rights. Depending on your state of residence, and if applicable, you may have certain rights under applicable state privacy laws, including the right to:
- Know what personal information we collect and how we use it
- Access your personal information
- Correct inaccurate personal information
- Request deletion of our personal information
- Revoke your consent (with certain exceptions)
- Opt out of or restrict certain types of sharing of personal information
- Opt out of or restrict certain uses of artificial intelligence to assist individuals who are using your personal information
To learn more about your rights or to exercise your rights, please contact BYU’s Data Privacy Officer at privacy@byu.edu or call or text BYU OIT at 801-422-2000.
Changes to this Notice and Consent. We regularly review this notice and consent policy and may change, modify, add, or remove portions as needed. If we change this notice and consent in ways that affect how we use your personal data, we will provide such notice in a communication to you, when you log into an online service, or in this policy. We encourage you to check this notice and consent from time to time to keep up to date on any changes.
Consent. By accepting employment with CE Events, LLC, you acknowledge and consent to the collection, use, and disclosure of your personal information as described in this policy. You understand that this consent is a condition of employment and that your information will be processed in accordance with applicable laws.