Data Privacy

1. Information Collection

We collect and process the following personal data necessary for institutional identification and access control:

• Identity Data: Full Name, RSU Email Address, and Employee ID.
• Institutional Data: Assigned Role, Campus Site, and Academic/Administrative Unit.
• Accessibility Preferences: Settings for visual assistance (Font Scale, High Contrast) are stored locally to your profile.

2. Purpose of Processing

Your data is utilized strictly for the following purposes:

• To verify your authority to submit or approve official UAQA Portal documentation.
• To maintain a permanent **System Audit Trail** of all quality management activities.
• To generate sex-disaggregated analytics for Gender and Development (GAD) reporting.

3. Data Protection & Cryptographic Standards

UAQA Portal employs multi-layer enterprise security standards to guarantee the confidentiality, integrity, and non-repudiation of institutional records:

• At-Rest Cloud Storage Encryption (AES-256): All UAQA Portal documents stored in Google Drive repositories and Firestore database entries are encrypted at rest with hardware-accelerated, FIPS 140-2 validated Advanced Encryption Standard (AES-256).
• In-Transit Network Security (TLS 1.3 / AES-GCM): All data transmissions between client devices and university cloud bridges are encrypted using modern Transport Layer Security (TLS 1.3) with 256-bit AES Galois/Counter Mode authenticated ciphers under Let's Encrypt SSL certificates.
• Cryptographic Tamper Verification (HMAC-SHA-256): QR code attendance check-ins, dynamic OTP codes, and offline audit logs are signed with native Web Crypto API Hash-based Message Authentication Codes (HMAC-SHA-256) with annual key rotation to detect unauthorized alteration.
• Credential Security (Salted scrypt): User credentials and passwords are protected through multi-round salted scrypt key derivation functions, preventing brute-force and rainbow table compromises.

4. User Rights

As a data subject, you retain the right to access, correct, or request the deletion of your account through the UAQA Portal Data Protection Officer.