Personal Information Collection Statement (PICS) for OCIO Identity and Access Management Systems and IT Services

1. When users log in the University information system through our centrally-managed Identity and Access Management systems using their EdUHK network account provided by the University, they are obliged to comply with the University regulations concerned - https://www.eduhk.hk/ocio/computing-policies-and-regulations.
2. Usage logs together with users’ personal information will be used by the Office of the Chief Information Officer (OCIO):
   a. For operational purposes, such as diagnosis of technical problems, investigation on potential security incidents, audit and planning purposes; and
   b. For purposes of enforcing University regulations.
3. The data collected is intended for internal use and will only be accessed by persons authorised by the Chief Information Officer or his/her delegates.
4. The data collected will be kept up to 1 year (unless stated otherwise) and will be purged thereafter.
5. For enquiries about this PIC statement, please kindly write to listen@ocio.eduhk.hk.