1. Purpose

This policy establishes Rockview Business School’s commitment to protecting intellectual property rights and safeguarding personal data in compliance with international best practices.

2. Scope

• Applies to all staff, students, contractors, and third-party partners.
• Covers all forms of intellectual property (IP), digital records, and personal data processed by the institution.

3. Copyright Policy

• Ownership: All teaching materials, research outputs, and publications created by staff under contract belong to Rockview Business School unless otherwise agreed.
• Fair Use: Students and staff may use copyrighted materials for academic purposes under fair use/fair dealing provisions.
• Licensing: External use of Rockview Business School’s IP requires prior written authorization.
• Infringement: Unauthorized reproduction, distribution, or modification of copyrighted materials is prohibited and may result in disciplinary or legal action.

4. Data Protection Principles

Aligned with GDPR and ISO/IEC 27001:

• Lawfulness & Transparency: Data collected must have a clear legal basis and be communicated to data subjects.
• Purpose Limitation: Data is used only for specified academic, administrative, or legal purposes.
• Data Minimization: Only necessary data is collected.
• Accuracy: Records must be kept up to date.
• Storage Limitation: Data is retained only as long as necessary.
• Integrity & Confidentiality: Security measures protect against unauthorized access, alteration, or loss.

5. Procedures

• Data Collection: Consent forms must be signed before collecting personal data.
• Data Storage: Secure servers with encryption and access controls.
• Data Access: Restricted to authorized personnel; role-based permissions enforced.
• Data Sharing: Third-party sharing requires contractual safeguards and compliance checks.
• Data Breach Response: Incidents must be reported within 24 hours to the Data Protection Officer (DPO), with notification to affected individuals and regulators as required.
• Data Subject Rights: Individuals may request access, correction, deletion, or portability of their data.

6. Governance

• Data Protection Officer (DPO): Oversees compliance, training, and audits.
• Copyright Committee: Reviews IP disputes and licensing requests.
• Annual Review: Policies are updated annually to reflect regulatory changes.

7. Enforcement

• Violations may result in disciplinary measures, contract termination, or legal proceedings.
• Continuous monitoring ensures compliance with global standards.