
Each February, The University of the West Indies celebrates Privacy Awareness Month. This observance serves as a reminder of our shared responsibility to protect the personal data entrusted to us by students, staff, alumni, and stakeholders. It also reinforces our commitment to upholding the highest standards of accountability, transparency, and trust under the University’s Data Protection Policy and the various laws in the jurisdictions in which the University operates and those governing the people whose personal data we process.
This year marks the fourth consecutive observance of Privacy Awareness month and the theme selected for this year’s activities is “Moving beyond Privacy Awareness”. This theme has been deliberately selected to recognise the turning point our University has reached. Our Privacy Management Programme began in 2020 and we have now begun to see behaviour change and small steps in embedding good privacy practices in our Ways of Working.
As we embark on another month of activities, let us reflect on the Vision of our Privacy Management Programme – To embed privacy in all University operations, from routine tasks to strategic initiatives - and its Mission - To uphold the rights and dignity of individuals by ensuring that the University processes personal data lawfully, securely, and responsibly through clear guidance, practical support, and vigilant oversight. Remember, even though February is our focused period, privacy should always be at the forefront of our daily activities. I look forward to sharing with you, hearing your stories, and assisting with your challenges.

This year marks the fourth consecutive year that the University of the West Indies is observing February as Privacy Awareness Month. Since the Privacy Management Programme began, formally, in August 2021, the University community has made steady progress in understanding what privacy is and why it matters to how we teach, research, and operate. At its simplest, privacy means respecting people’s personal information; collecting and using it only for legitimate purposes, keeping it secure, and handling it fairly and transparently.
This year’s theme, “Moving beyond Privacy Awareness”, is well aligned with where the University currently stands. We are actively advancing our Digital Transformation agenda, and this academic year has been designated the Year of Digital Acceleration to maintain that momentum. As we rely more heavily on digital systems, platforms and data-driven processes, privacy must be firmly built into how we work. Privacy should not be treated as an afterthought.
For the past few years, our focus has rightly been on awareness. Now, it is imperative that the emphasis shifts to practice. Moving beyond awareness means making privacy part of our everyday ways of working. We must embed privacy in the small, practical decisions we make each day about how personal data is collected, used, shared, stored, and protected.
These privacy ways-of-working (privacy WoWs) may be simple, but they matter: checking whether information is genuinely needed before collecting it; limiting access to those who need it; being thoughtful when sharing data digitally; securing systems and files; and raising questions early when introducing new tools, platforms, or processes. When consistently applied, these practices strengthen trust and reduce risk while supporting innovation.
As we accelerate digitally, embedding privacy into our ways of working helps ensure that our transformation is responsible, sustainable, and worthy of the confidence placed in the University by its students, staff, alumni, partners, and other stakeholders across our many jurisdictions.
I encourage all members of the University community to engage with the activities planned for Privacy Awareness Month and to carry these privacy WoWs forward throughout the year. Digital acceleration and strong privacy practices are not competing goals, they go hand in hand.

As The University marks its fourth consecutive observance of Privacy Awareness Month, this February signals an important transition as we mature from understanding data privacy to embedding it into the discipline, rhythm, and integrity of our daily operations, across the institution.
As Operational Lead for Data Protection, and as Chair of the Data Protection Implementation Committee, I am keenly aware of the responsibility that accompanies the University’s Digital Transformation agenda and this academic year’s designation as the Year of Digital Acceleration. As our reliance on digital tools deepens, so too does the responsibility placed on our people, processes, and systems. Digitisation expands our reach and capability, but it also demands clarity, accountable practices, and disciplined judgement in every interaction involving personal data.
In its oversight role, the Data Protection Implementation Committee provides direction, and institutional assurance for how data protection is implemented across faculties, departments, and administrative units. A key focus of the Committee has been ensuring that the University moves beyond policy statements to practical, workable procedures that reflect how business is actually conducted.
In this regard, the Office of Administration has been actively engaging working groups and staff across the University to develop, test, and roll out Data Protection Procedures for business units. These sessions have reinforced the importance of embedding privacy ways-of-working into the muscle memory of our operations, expressed access controls, data-sharing practices, record-keeping, system design, or day-to-day decision-making
The theme “Moving beyond Privacy Awareness” speaks directly to this phase of work. Privacy must now be applied consistently, not just understood conceptually. It is through clear procedures, informed staff, and oversight at both the unit and institutional levels that privacy becomes sustainable and effective.
Privacy Awareness Month provides an opportunity to reflect on progress, address practical challenges, and reinforce expectations. I encourage all staff to engage with the activities planned and to continue working with the Office of Administration, the University Data Protection Office, and the Implementation Committee as we strengthen privacy practices across the University.
As we accelerate digitally, disciplined and well-governed privacy practices will remain essential to maintaining trust, meeting our legal obligations, and supporting the University’s operational excellence.

The University of the West Indies observes February as Privacy Awareness Month, and this year marks the fourth consecutive year of this important institutional focus.
At the Cave Hill Campus, privacy and data protection are closely tied to our academic, administrative, and research responsibilities within Barbados’s legislative and regulatory environment. Our work spans teaching and assessment, student services, research activity, financial administration, alumni engagement, and regional collaboration. Each of these functions depends on the responsible handling of personal data.
This year’s theme, “Moving Beyond Privacy Awareness,” reflects the point the University has reached. As the University advances its Digital Transformation agenda, awareness alone is no longer sufficient. The Cave Hill Campus this year is completing a comprehensive upgrade and consolidation of its enterprise software systems, thus reinforcing the need to embed privacy firmly into how our systems, processes, and decisions operate on a daily basis.
Moving beyond awareness at the Cave Hill Campus means ensuring that privacy is built into academic administration, research design, student engagement, and the growing use of digital platforms for learning, assessment, and support services. It means collecting only what is necessary, limiting access appropriately, using approved systems, and applying careful judgement when sharing information internally or externally.
The University Data Protection Policy applies fully at the Cave Hill Campus and provides a consistent framework for good governance, regardless of local legislative differences. Applying this policy consistently protects our students and staff, supports regulatory compliance, and strengthens confidence in the University’s operations.
I encourage members of the Cave Hill Campus community to engage with Privacy Awareness Month activities and to reflect on how privacy is embedded in their own roles. As we continue to accelerate digitally, strong privacy practices must remain an integral part of how we teach, research, and administer the affairs of the Campus.

As the newest of the University’s landed campuses, the Five Islands Campus continues to build its academic, administrative, and community foundations with purpose and momentum. This stage of our development offers a unique opportunity to embed strong and responsible practices from the outset, rather than retrofitting them later.
Privacy Awareness Month provides a timely reminder that how we design our systems, services, and processes today will shape how the Campus operates for years to come. As the University advances its Digital Transformation agenda, and in this academic year designated as the Year of Digital Acceleration, the Five Islands Campus is growing in an environment that is inherently digital, interconnected, and data-driven.
Moving beyond privacy awareness means making privacy part of how we work from the beginning - how we enroll students, deliver teaching, manage assessments, support research, administer services, and engage with external partners. These privacy ways-of-working include using approved platforms, collecting only what is necessary, managing access carefully, and ensuring that personal information is handled with respect and purpose.
Although legal frameworks may differ across the countries in which the University operates, the University Data Protection Policy applies fully at the Five Islands Campus. This consistent standard supports trust, good governance, and confidence for our students, staff, and partners, while enabling innovation and growth.
As a young campus, we are well positioned to lead by example. By building privacy into our routines, systems, and decisions from the start, we strengthen our institutional culture and reinforce the values that define the University.
I encourage all members of the Five Islands Campus community to engage with Privacy Awareness Month activities and to reflect on how privacy is embedded in their daily work. As we continue to grow and accelerate digitally, let us ensure that respect for privacy remains a core feature of how the Five Islands Campus develops and delivers on its promise.

The Global Campus operates through physical locations in 16 countries and delivers education and support primarily through online platforms to learners across the Caribbean and beyond. This unique model, in the context of the University, based on a Pan-Caribbean distributed “ecosystem” makes the responsible handling of personal data central to everything we do. We must be especially and exceptionally vigilant.
Recent months have also required the Global Campus to operate under challenging conditions. Hurricane Melissa severely impacted our staff and students in Western Jamaica, as it mercilessly traversed the parishes of Hanover, Westmoreland, Saint James, Saint Elizabeth, Trelawny, Manchester, Saint Ann and Clarendon. While rebuilding continues, the Global Campus remains focused on maintaining continuity for students and staff while adapting to revised delivery and operating arrangements. This is not a novel experience for the Global Campus since, to refer again to our distributed geographical spread throughout the Caribbean Region, we can be pretty sure that hurricanes, tropical storms and other natural hazards, irrespective of where they make landfall in the Caribbean Region, are quite likely to impact us, a reality which we have reconciled ourselves to, and try to gird our loins for. We have done this before.
Periods of disruption such as this require rapid adjustments to delivery modes, sites, and support arrangements. These adjustments often involve the creation, movement, and sharing of personal information across campuses, countries, and digital platforms to support continuity of teaching and services. Maintaining clear boundaries around who collects, accesses, and uses this information, while relying on approved systems, helps ensure that necessary operational decisions do not weaken privacy standards or institutional accountability.
Not all of the countries in which we operate have dedicated data protection or privacy legislation. This does not, however, lessen the University’s responsibilities and accountability. The University Data Protection Policy applies to all UWI locations and operations, including Global Campus Sites and all online delivery environments, regardless of local legislative differences.
This year’s Privacy Awareness Month theme, “Moving beyond Privacy Awareness,” aligns closely with the Global Campus context. The University is advancing its Digital Transformation agenda, and this academic year has been designated the Year of Digital Acceleration. For a campus whose core mandate is digital delivery, privacy must be embedded into everyday ways of working as systems, platforms, and methods continue to evolve.
Moving beyond awareness means applying privacy ways-of-working consistently, whether operating from a physical site or delivering services entirely online. Collecting only what is necessary, sharing information responsibly, securing records, and paying close attention to how data moves between systems and jurisdictions are practical actions that support both continuity and good governance.
I encourage all members of the Global Campus community to engage with Privacy Awareness Month activities and to reflect on how privacy is built into their daily work. As we continue to rebuild where needed, expand our physical presence, and accelerate digital delivery, responsible data protection must remain a constant everywhere we work and everywhere we teach.

As we observe Privacy Awareness Month this February, we do so at a time when the Mona Campus, and Jamaica as a whole, continues to recover from the effects of Hurricane Melissa. Many of our students and staff, particularly those from western parishes, have experienced disruption, loss, and ongoing hardship. The rebuilding effort is still underway, and the University remains committed to supporting those affected.
In moments like these, the instinct is rightly to act quickly and compassionately. At the same time, periods of crisis and recovery often involve the handling of increased volumes of sensitive information relating to financial support, housing, health, academic accommodations, and other forms of assistance. It is precisely in these circumstances that privacy and data protection matter most.
At the Mona Campus, units such as Student Services, the Bursary, Halls of Residence, academic departments, and support units have been working under sustained pressure to meet emerging needs. Much of this work requires access to personal and, in some cases, highly sensitive information. It is therefore essential that privacy ways-of-working are applied consistently, even as services are delivered at pace and under demanding conditions.
This year’s theme, “Moving beyond Privacy Awareness,” is especially relevant for the Mona Campus. The University’s Digital Transformation continues, and this academic year has been identified as the Year of Digital Acceleration. As we rely more heavily on digital systems to coordinate relief, manage services, and maintain continuity, we must ensure that care for people includes care for their personal data.
Moving beyond awareness means applying privacy ways-of-working even when operations are under strain: collecting only what is necessary; sharing information carefully and on a need-to-know basis; using approved systems; securing records; and being mindful of dignity when dealing with matters that are personal and often distressing.
Privacy is not an obstacle to compassion or efficiency. On the contrary, it strengthens trust and protects the very people we are trying to help. When students and staff know that their information is handled responsibly, they are more likely to seek assistance and engage confidently with the University’s support processes.
I encourage all members of the Mona Campus community to participate in Privacy Awareness Month activities and to remain thoughtful in how personal data is handled throughout the continued recovery period and beyond. As we rebuild, accelerate digitally, and support one another, let us ensure that respect for privacy remains part of how we work – especially now.

February is observed across the University as Privacy Awareness Month, and 2026 represents the fourth year of this coordinated institutional observance.
The St Augustine Campus generates and manages significant volumes of personal data across teaching and learning, research, student administration, healthcare services, housing, finance, and campus operations. The scale and complexity of these activities make strong privacy practices essential to the effective functioning of the Campus.
This year’s theme, “Moving Beyond Privacy Awareness,” aligns closely with the Campus’ operational reality. The University continues to advance its Digital Transformation agenda, and this academic year has been designated the Year of Digital Acceleration. As digital systems and data-driven processes become even more central to our work, privacy must be treated as a routine operational discipline rather than a theoretical concept.
Moving beyond awareness means embedding privacy into everyday Campus activities: ensuring that student information is handled with care; that research data is managed responsibly; that access to records is controlled appropriately; and that new systems and initiatives are designed with privacy considerations addressed from the outset.
The University Data Protection Policy applies fully at the St Augustine Campus and provides a common standard across the University’s multi-jurisdictional operations. Consistent application of this policy supports trust, reduces risk, and enables the Campus to operate efficiently while meeting its legal and ethical responsibilities.
I encourage all members of the St Augustine Campus community to engage with Privacy Awareness Month activities and to reflect on how privacy is applied in their daily work. As we accelerate digitally, disciplined and thoughtful privacy practices must remain integral to how the Campus serves its students, staff, and wider community.

Undergraduate education sits at the heart of the University’s mission. From admissions and registration to teaching, assessment, advising, and student support, the undergraduate experience involves the regular creation and use of personal information about our students. Ensuring that this information is handled responsibly is fundamental to trust, fairness, and academic integrity.
This year’s Privacy Awareness Month theme, “Moving Beyond Privacy Awareness,” is especially relevant in the context of undergraduate studies. As the University advances its Digital Transformation agenda, and as this academic year has been designated the Year of Digital Acceleration, digital platforms now play a central role in learning delivery, assessment, student services, and academic administration.
Moving beyond awareness means embedding privacy into the everyday academic experience of our students and staff. It means being thoughtful about how student information is accessed and shared, applying appropriate controls within learning-management systems, using approved digital tools, and ensuring that privacy considerations are addressed when new teaching methods, platforms, or assessment approaches are introduced.
For students, moving beyond awareness also means understanding their own role in protecting personal information, both their own and that of others, when engaging in group work, online discussions, assessments, and digital collaboration. Privacy awareness at the undergraduate level supports responsible digital citizenship alongside academic development.
The University Data Protection Policy applies fully across all undergraduate programmes, campuses, and modes of delivery. Consistent application of this policy strengthens confidence in the undergraduate experience and reinforces the University’s commitment to responsible, student-centred education.
I encourage undergraduate students, academic staff, and professional staff to engage with Privacy Awareness Month activities and to reflect on how privacy is embedded in teaching, learning, and support services. As we accelerate digitally, strong privacy practices must remain an integral part of the undergraduate experience at The UWI.

Graduate education and research are central to the University’s contribution to knowledge creation, innovation, and regional development. Across postgraduate teaching, supervision, examinations, research administration, and scholarly collaboration, significant volumes of personal and sensitive information are generated and processed. These endeavours place The UWI in positions of trust - as a custodian of sensitive research data, a steward of intellectual property, and a partner to communities, funders, governments, and international collaborators. The integrity of this work depends not only on academic excellence, but on disciplined, ethical, and well-governed data practices.
This year’s theme, “Moving Beyond Privacy Awareness,” aligns closely with The UWI’s mission:- “To advance learning, create knowledge and foster innovation for the positive transformation of the Caribbean and the wider world.” The theme also supports the implementation of The UWI’s strategic goals:
AC4 - Increase the quality and quantity of high impact research and AG3 - Build out The UWI Digital Agenda to foster greater efficiency in operational processes and innovation in the delivery of its services.
As the University advances its Digital Transformation agenda and operates within the Year of Digital Acceleration, research is increasingly shaped by large datasets, digital repositories, analytics platforms, artificial intelligence, and cross-border collaboration. In such a landscape, privacy cannot be addressed casually or retrospectively.
Moving beyond awareness means ensuring that privacy considerations are embedded into the design and conduct of research, the supervision of graduate students, and the administration of postgraduate programmes. From proposal design, ethics review, data-management planning, supervision, publication, and long-term data stewardship, research often involves sensitive personal data, community-based information, proprietary datasets, and cross-border data sharing. Handling such information responsibly is essential to good research practice, participant trust, and institutional credibility.
For graduate students and researchers, privacy is not separate from academic rigour, it is part of it. Ethical research design, transparent data-handling practices, secure storage, and appropriate sharing arrangements all contribute to high-quality scholarship and compliance with regulatory and funding requirements.
The University Data Protection Policy applies fully to all graduate programmes, research activities, and research partnerships, regardless of location or discipline. Consistent application of this policy supports responsible research governance and protects both participants and researchers across The UWI’s multi-jurisdictional environment.
I encourage all research staff and students, supervisors, and research administrators to engage with Privacy Awareness Month activities and to reflect on how privacy is embedded in their academic and research practices. As the University accelerates digitally and expands its research impact, disciplined and ethical data protection must remain a cornerstone of graduate education and research excellence.
The University’s observance of Privacy Awareness Month each February provides an important opportunity to reflect on how privacy underpins our international engagement and global partnerships.
The Office of Global Affairs supports the University’s teaching, research, mobility, recruitment, alumni relations, and partnerships across multiple jurisdictions. These activities involve the regular exchange of personal data across borders, institutions, and digital platforms. Responsible data protection is therefore central to sustaining trust with students, staff, partners, and international stakeholders.
This year’s theme, “Moving Beyond Privacy Awareness,” is particularly relevant within the context of global engagement. As the University advances its Digital Transformation agenda, and as this academic year has been designated the Year of Digital Acceleration, the movement of data across countries and systems is increasing. Privacy cannot be managed reactively or inconsistently in such an environment.
Moving beyond awareness means ensuring that privacy considerations are integrated into international agreements, student mobility arrangements, collaborative research projects, recruitment activities, and digital engagement strategies from the outset. It requires clarity around data roles, lawful bases for processing, safeguards for cross-border transfers, and alignment with the University’s Data Protection Policy, regardless of local legislative variation.
The University’s ability to operate confidently on the global stage depends on consistent, well-governed privacy practices. When partners and participants trust the University’s handling of personal data, international collaboration is strengthened rather than constrained.
I encourage colleagues engaged in international activities to use Privacy Awareness Month as an opportunity to reflect on current practices and to embed privacy more deliberately into future initiatives. As the University accelerates digitally and expands its global footprint, responsible data protection must remain a cornerstone of how we engage with the world.

Academic excellence, meaningful industry partnerships, and effective institutional planning all depend on the responsible use of data. As the University observes Privacy Awareness Month, this provides an opportunity to reflect on how privacy underpins these core functions—particularly as the University continues its Digital Transformation and advances through the Year of Digital Acceleration.
Across teaching, research, quality assurance, analytics, and external engagement, the University increasingly relies on digital platforms and data-driven insights to inform decision-making and improve outcomes. Moving beyond privacy awareness requires that privacy considerations be built into these activities at the design stage—not added later as a compliance exercise.
In the context of academic planning and industry collaboration, this means being clear about data roles and responsibilities, setting appropriate conditions for data sharing, and ensuring that new partnerships and initiatives reflect the University’s data protection standards. Strong privacy practices support trust with partners, enable responsible innovation, and protect the interests of students, staff, and collaborators.
As we expand industry-linked programmes, applied research, micro-credentials, and digital delivery models, privacy ways-of-working must be part of how initiatives are conceived, approved, and implemented. This includes asking early questions about necessity, proportionality, security, and transparency when proposing new systems, projects, or collaborations.
The University Data Protection Policy applies across all campuses and operations, including academic and partnership activities, regardless of location or delivery mode. Consistent application of this policy strengthens governance and supports sustainable growth—particularly as the University operates across multiple jurisdictions and sectors.
I encourage colleagues involved in academic leadership, planning, and external engagement to use Privacy Awareness Month as a moment to review current practices and to embed privacy into future initiatives. As we accelerate digitally and deepen our partnerships, responsible data use will remain central to delivering innovation that is credible, ethical, and aligned with the University’s mission.

Technology enables nearly everything we do at The University of the West Indies - from teaching and learning to research, communication, collaboration, and access to services across all campuses. The Office of the University Chief Information Officer (OUCIO) leads this effort by coordinating and mobilising campus ICT teams into a cohesive University-wide group, enabling digital transformation and providing secure, reliable, and integrated information and communication technology services that support students, staff, and the wider community.
This year’s Privacy Awareness Month theme, “Moving Beyond Privacy Awareness,” comes at a pivotal moment. As the University accelerates its digital evolution during the Year of Digital Acceleration, we are relying more than ever on connected platforms, data systems, cloud services, and online tools to teach, to learn, to work, and to engage with stakeholders across the Caribbean and beyond.
Privacy - and the secure handling of personal information - must be built into every digital interaction. We are at the stage where it is no longer enough to be aware of privacy principles; we must put them into practice every day. These practices must become integral in how we work, think and interact. Whether you are accessing your student portal, participating in online learning, submitting research data, or engaging with University systems from your mobile device, good privacy practices protect you and those around you.
Within the OUCIO and across campus ICT teams, we are committed to ensuring that systems are designed and managed with privacy and security in mind. This includes secure account management, thoughtful system configuration, layered access controls, encryption, and proactive monitoring - all guided by the University’s broader governance frameworks.
That said, technology alone cannot guarantee privacy. Each member of the University community - students, faculty, professional staff, and administrators - plays a part. We will need to be mindful about how we share information online, choose strong authentication practices, recognise and avoid phishing or social-engineering threats, and report concerns promptly. These practices contribute to a safer digital environment for everyone.
I encourage you to take part in the activities planned for Privacy Awareness Month. Use this opportunity to learn more about how to protect your own information, how systems across The UWI are designed with privacy in mind, and how we can all contribute to a culture of responsible, respectful data stewardship as we continue to accelerate digitally.

Every digital convenience carries a legal consequence, whether we pause to consider it or not.
As we observe Privacy Awareness Month under the theme “Moving Beyond Privacy Awareness,” it is timely to recognise that privacy is no longer an abstract or peripheral issue. In a digital university, privacy sits squarely at the intersection of law, governance, risk, and everyday decision making.
The University is advancing rapidly through its digital transformation and the Year of Digital Acceleration. Our systems are increasingly interconnected, information moves faster, and digital tools, including artificial intelligence enabled technologies, are now embedded in teaching, research, administration, and engagement. With this progress comes a heightened legal and institutional responsibility for how personal, academic, research, and operational information is used, shared, and protected.
That responsibility is amplified by the scale and reach of the University. With five campuses operating across seventeen jurisdictions, we navigate multiple legal and regulatory environments at the same time. Privacy does not reside only in legislation, policies, or technical safeguards. It is shaped by ordinary decisions made every day. Who has access to information. Whether that access is necessary. How information is shared. Where it is stored. How long it is retained. These considerations apply with particular force when using AI tools, where data inputs, outputs, and automated decision making can have far-reaching and sometimes unintended consequences.
Moving beyond awareness therefore requires discipline and judgement. It requires colleagues at all levels to pause before acting, to understand the implications of new technologies, to question assumptions about access and necessity, and to balance speed and convenience with accountability and responsibility. Responsible use of digital and AI tools is not a barrier to innovation. It is a safeguard for sustainable digital progress.
As the University continues to modernise, privacy must be understood as an enabler of resilience, trust, and institutional credibility. Institutions that manage information well, including in the context of emerging technologies, are better positioned to innovate confidently, collaborate responsibly, and protect their communities.
I encourage colleagues across all campuses to treat this month not as a symbolic observance, but as a reminder that privacy is a shared legal and governance responsibility, embedded in the daily work of a digital and increasingly AI-enabled University.
© Copyright 2026 The University of the West Indies. All rights reserved | Disclaimer | Privacy Statement