Online Directory Data Protection


IT Services and the Directory Office take the privacy of the University community very seriously. Your privacy is safeguarded through the use of various protocols, functions, and features.

Contents

Directory Access: Logged In vs. Non-Logged In Users

Logged in users are those who log in to the Directory with a CNetID or UCHADID and password. This includes current faculty, students, and University and Hospital staff. Once logged in, these users can view all available information within the entire Directory.

Non-logged in users could be those who have have the ability to log in but have chosen not to do so, or they could be the general public. Non-logged in users can see up to 25 entries for any given search and can view the basic contact information (name and email) and any information that has been added and is not hidden from non-University viewers. This includes the name and email of students who have disabled FERPA (Family Educational Rights and Privacy Act) status.

Because non-logged in users can include alumni, former faculty and staff, spouses of faculty and staff, members of UChicago affiliate organizations, and so on, you are encouraged to consider the full audience when choosing what information to make public and what information should be available only to the logged in University community.

Directory Information and Who Can View It

Faculty and Staff

Your information is available to the general public unless you opt to hide it. You may hide most of your information such as office phone number, office location, title, and department, but you cannot hide basic information like your name and email address.

Students

Your information is automatically hidden from anyone other than logged in faculty or staff, including other students, due to FERPA. However, you can choose to make it visible by disabling FERPA. You can enable or disable FERPA at any time. Find additional information about FERPA at Student Records and FERPA.

Change Your Directory Profile Privacy Setting

Students

To change your information from hidden to public and visa versa:

  1. Log in to my.UChicago (my.uchicago.edu) with your CNetID and password, then complete two-factor authentication if prompted.
  2. Go to your profile page by selecting My Profile in the menu on the right side of the page.
  3. On your profile page, your current FERPA status is listed next to FERPA Directory Information. 

To change your FERPA status:

  1. Select Edit next to your current status.
  2. Click Edit FERPA/Directory Restrictions.
  3. Select the Restrict All Fields option button to enable FERPA or the Release All Restrictions option button to disable FERPA.

Faculty and Staff

Basic information like your name and email address cannot be hidden. However, additional designated contact types such as Office, Lab, Home, or Miscellaneous can be. To make changes:

  1. Go to the Directory (directory.uchicago.edu) and sign in with your CNetID and password. Complete two-factor authentication if prompted.
  2. Select Welcome, [Your Name] to go to the Modify Your Directory Entry page.
  3. Select the respective contact you wish to hide, such as Office or Lab, and then select the box next to Hide this information from non-UChicago Viewers.

Directory Settings for Students Who Are Also Staff Members

If you are a student and also a staff member, your student status means your FERPA status stays in place; therefore, your information is hidden from anyone other than logged-in faculty or staff. You do, however, have the ability to disable FERPA and make your information visible to the general public.

Email Links and Account Security

Email Links

Email links are included in basic contact information to facilitate communication among members of the UChicago community. While you may choose to hide details like your office phone number, office location, title, and department, the inclusion of your email address represents the minimum contact information needed to ensure others are able to reach you if necessary.

Security

A non-logged-in user can receive a maximum of 25 search results for any single search. This provision protects your privacy and prevents a large number of email addresses from being accessible for the purposes of spamming through an automated program. Instances of individuals receiving spam in such numbers as to be significant are extremely rare. If you find that you're receiving an inordinate amount of spam through your UChicago email address, please contact IT Services.

LDAP Security

LDAP (Lightweight Directory Access Protocol) is a queryable server for those who know how to query it, but querying LDAP to obtain directory data does not enable greater access to information. The only information someone would be able to receive is equal to that of a non-logged in, or general public user.

To learn more about LDAP and how it is employed by the University, please see Using LDAP Affiliations for Authorization.

Privacy Concerns

If you have data privacy or protection concerns, or questions about modifying the contact information that's displayed in the Directory, please contact the Directory Office at directory@uchicago.edu.