Compliance and Disclosure Information

General Data Protection Regulation (GDPR)

The General Data Protection Regulation (“GDPR”) is the comprehensive data protection law for the European Union (EU). The GDPR establishes protections for the privacy and security of “personal data” of individuals located in the EU, known as “data subjects.” Data subjects enjoy these protections regardless of citizenship status, and citizens of EU member states are protected whether or not they are physically located within the EU. The GDPR applies to the “processing” of a subject’s personal data, broadly defined to include collecting, organizing, structuring, storing, altering, retrieving, using, disclosing, transmitting, erasing, or destroying that data.

Stonehill also maintains an Information Security Policy. The purpose of this policy is to identify information resources as a critical College asset and to define responsibilities to safeguard these resources from unauthorized access, modification, disclosure, or destruction. The policy applies to all information collected, stored, or used by any division, department, or person in connection with College business. This policy complements requirements of Massachusetts and United States laws, as well as the GDPR, with respect to the security and privacy of educational, business, or other records maintained by the College.

View the Information Security Policy

Stonehill is committed to reasonably maintaining the privacy of information provided by visitors to our website. The College maintains information relevant to the terms and conditions of use of our website.

View the Terms and Conditions

The College and our outside partners are committed to keeping your personal information safe. Details on the types of information maintained and the security measures in place can be found below. The tabs at the bottom of the spreadsheet correspond to pages organized by category.

View the GDPR Compliance Spreadsheet

If you have questions about Stonehill's GDPR compliance, or if you would like to request modification or removal of your information, please contact us.

State Nonprofit Disclosures

Certain states require written disclosures for nonprofit organizations soliciting contributions. Individual state disclosures are provided below:

  • Maryland: For the cost of copies and postage, from the Office of the Secretary of State, State House, Annapolis, MD 21401.
  • Nevada: Contributions may be tax deductible pursuant to the provisions of section 170(c) of the Internal Revenue Code of 1986, 26 U.S.C. §170(c).
  • New York: Upon request, from the Attorney General Charities Bureau, 120 Broadway, New York, NY 10271.
  • Washington: From the Secretary of State at 1-800-332-4483 or http://www.sos.wa.gov/charities/
  • Wisconsin: A financial statement of the charitable organization disclosing assets, liabilities, fund balances, revenue, and expenses for the preceding fiscal year will be provided to any person upon request.

Registration with a state agency does not constitute or imply endorsement, approval, or recommendation by that state.

Stop Campus Hazing Act of 2024

The Act requires colleges and universities to make information about hazing violations publicly available through a Campus Hazing Transparency Report. This report helps increase awareness and accountability for hazing while protecting the privacy of individual students.

For each student organization found responsible for a hazing violation, the report will provide:

  • The name of the organization
  • A general description of the violation, including whether alcohol or drugs were involved
  • The institution’s findings and any sanctions imposed
  • The date the incident allegedly occurred
  • The date the investigation began and the date it concluded
  • The date the organization was notified of the findings
  • The first Campus Hazing Transparency Report must be posted by December 23, 2025.
  • The report will be updated at least twice per year (typically in January and July).
  • Each update will remain available to the public for five years.
  • The report will not include any personally identifiable information about individual students, in accordance with federal privacy law (FERPA).

Related Information

For You