Privacy Policy

Privacy Policy Statement
The National Association of College and University Attorneys (“NACUA” or “we”) is committed to the protection of your personal data.  This Privacy Policy explains how we collect, use, and share personal data to support our business activities.

In this Privacy Policy we use “personal data” to describe information that is about you and which identifies you.

NACUA collects personal data through its website (www.nacua.org), mobile applications, and other digital platforms (collectively, “platforms”). This Privacy Policy outlines who is responsible for the personal data we collect, what personal data we collect, how we use it, who we may disclose it to, and your rights and choices regarding your personal data. This Privacy Policy applies for each of NACUA’s platforms, as identified below.

NACUA platforms:

• Nacua.org
• Events.nacua.org (Event websites)
• Community.nacua.org (NACUANET-Higher Logic Community Platform)
• Pathlms.com/NACUA (Blue Sky PATH – Learning Management System)
• Nacua.quickbase.com (Web Application portal for operational support apps)
• Other partner website applications that support our events

Operating Globally; Your Rights

At times, NACUA members are located outside of the United States. The following rights apply for all NACUA members, regardless of their location.

1. The right to be informed. NACUA uses and handles your personal data in accordance with the terms outlined in this Privacy Policy.
2.  The right of access. You may contact NACUA at any time to request information about personal data that NACUA has processed on your behalf.
3. The right to rectification. You may contact NACUA at any time to correct personal data about you that NACUA has on record.
4. The right to object to processing. As stated in this Privacy Policy, you may contact NACUA at any time to object to NACUA’s processing of your personal data.
5. The right to restrict processing; withdrawing consent. As stated in this Privacy Policy, you may contact NACUA at any time to restrict the personal data that NACUA processes on your behalf; similarly, you may contact NACUA at any time to modify or withdraw consent for the processing of personal data.
6. The right to data portability.  You may contact NACUA at any time to request copies of the personal data that NACUA has for you on record.
7. The right of erasure (the right to “be forgotten”); limited data retention. You may contact NACUA at any time to request deletion of the personal data NACUA has about you. NACUA will do so in accordance with our retention policy stated herein. Similarly, NACUA will never retain your data as long as necessary under the legitimate purposes stated in this policy.
8. Personal data will not be used in automated decision making and profiling. NACUA will never use automated decision making based on your personal data.

NACUA has a legitimate business interest to process your personal data for the purposes stated within this Privacy Policy.

If you are located within the European Union or are subject to the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. You can find a list of EU supervisory authorities and their contact details on the website: Our Members | European Data Protection Board

If you are located outside of the European Union, you may have the right to file a complaint with a relevant data protection or consumer protection authority in your country or region. For example, individuals in the United States may contact:

• The Federal Trade Commission (FTC), which accepts complaints related to privacy and data security practices
• A state-level Attorney General’s office, depending on applicable local laws

Nothing in this Privacy Policy is intended to limit your right to file a complaint with any competent authority in your jurisdiction.

Data Collection and Usage

Examples of the types of Personal Data Collected:

• Contact Information: Full name, mailing address, phone number, and email address.
• Demographic Information: Biographical information, date of birth, race/ethnicity, gender identity, sexual orientation, disability.
• Health Information: See ‘Consumer Health Data Privacy’ below
• Professional Information: Title, institutional or firm affiliation, date you began practicing higher education law, practice areas, state bar admissions, years of practice.
• Event-Related Information: Dietary restrictions, ADA accommodations, emergency contact information.
• Technical Information: Internet protocol (IP) addresses, browser type, operating system, referring URLs, and other technical information.

Log Data and Device Information, Cookies and Website Analytics:

NACUA automatically collects certain information when you use the website, such as the IP address, domain names of visitors, browser type, history of pages viewed, and other usage information. We collect this information for site administration purposes, such as analyzing this data for trends and improving site performance.

Credit Card Information:

NACUA does not store or retain any credit card information collected on our website or other partner website applications for transactions, including but not limited to membership dues payments, event registrations, or product purchases.

How We Use Your Personal Data We Collect:

• To determine membership eligibility and enroll a member.
• To personalize and improve the usability of our website.
• To communicate with members and respond to inquiries.
• To process registrations for events and deliver NACUA products and services.
• To conduct surveys and gather feedback.
• To compile membership directories and registration lists (members only).
• To process payment for membership, products, and services.
• To share information with business partners for relevant products and services.
• To ensure compliance with legal obligations and protect NACUA’s interests.
• To share with NACUA planning groups.
• To protect and enforce our legal rights.

Methods of Collecting Information

We collect personal data through:

• Direct Interactions: When you provide data through our website, registration forms, or direct communication. Specifically, we collect information from you when you join as a member and when you contact or communicate with us (including through the website, email, or otherwise). We gather information when you provide it to us or interact with our staff or register for an event.  We may also collect or receive information about you from other direct sources, such as from an administrative user in your organization when creating a member account for you.
• Automated Technologies: Through cookies and similar tracking technologies that collect technical data about your browsing actions and patterns.

You can manage your cookie preferences through your browser settings. Please note that disabling cookies may affect your ability to access certain features of our website.

Sharing Your Personal Data

Through the Membership Directory and Conference Attendee List:

NACUA lists information from its members (including names, titles, institutions, addresses, phone numbers,  and email addresses) in a membership directory that is accessible to NACUA members and NACUA employees on NACUA’s website. NACUA also shares professional information with conference attendees through its mobile app and through an “attendee list” in connection with each NACUA conference or event.

With Third Parties:

• Personal Data. We may disclose personal data to third-party sponsors or service providers of NACUA events through its event app. We assume your consent for this data sharing; however, attendees can opt out of sharing their profiles at any time. Profiles only display name, title, and institution; email addresses are not included. Users may request that NACUA refrain from disclosing personal data to third parties by contacting NAUCA at nacua@nacua.org or by calling (202) 833-8390. Should you inform NACUA that NACUA may not share your personal data with third-party service providers for NACUA events, services offered by such service providers may not be available to you if such services rely on NACUA sharing your personal data.
• Log Data, Device Information, Cookies, Website Analytics. We may share statistical or aggregated information about our users with technology partners. This is done to support functions related to site administration performances, improving site performance, and analyzing data for trends regarding NACUA’s site visitors and use of our website.  

When Legally Necessary:

We may disclose personal data to comply with legal obligations, protect our rights and interests, or ensure the safety of our users and the public.

Withdrawing Consent:

To withdraw your consent for the sharing of your personal data, please contact NACUA by emailing nacua@nacua.org or by calling (202) 833-8390.

Consumer Health Data Privacy

This supplements the NACUA Privacy Statement and applies to personal data defined as “consumer health data” subject to the Washington State My Health My Data Act (MHMDA), the Nevada Health Data Privacy Act (NHDPA), or other applicable state consumer health privacy laws.   

Consumer Health Data We Collect:

As described above in Data Collection and Usage, we collect categories of information that could be considered consumer health data, including:

• Dietary information including restrictions, allergies, and other related information necessary to provide safe food service to you during events that you register for;
• ADA accommodation request information necessary to fully participate in the event and arrange housing that meets your specific needs during events that you register for.

Sources of Consumer Health Data:

As described above under Methods of Collecting Information, we collect personal information which may include consumer health data directly from you, from your interactions with our platforms or the platforms used by our trusted third-party vendors and service providers. 

Why We Collect and Use Consumer Health Data:

We collect and use consumer health data as reasonably necessary to provide you with the products and/or services you have requested or authorized. This includes fulfilling your request related to your dietary and/or accommodation needs during our events for which you have registered. 

Our Sharing of Consumer Health Data:

As described above under Sharing Your Personal Data, we share consumer health data with our trusted service providers (vendors, agents or processors) working on our behalf that help us plan for, provide food service, or housing accommodations during events for which you have registered.  We may also disclose consumer health data when necessary to comply with applicable law or respond to valid legal requests or processes.

How to Exercise Your Rights:

If you are covered by the MHMDA, the NHDPA, or other applicable privacy laws, you may have certain rights with respect to your data, including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions. You can request to exercise such rights by notifying us at the email address provided below under Contact Us. 

Email and Mailing List Policies

Your email address will only be used by NACUA staff and will not be sold or rented to third parties.

External Links

Our website may contain links to third-party websites. NACUA is not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any sites you visit.

Information Security

NACUA employs industry-standard security measures to protect your personal data. We also have in place privacy protection control contractual obligations with our vendors designed to ensure that personal data is protected from unauthorized access or disclosure. All NACUA employees must abide by NACUA’s Privacy Policy Statement. Only authorized employees are permitted to have access to personally identifiable data about website visitors, and that access is limited to what is reasonably needed to perform an employee’s responsibilities, such as providing updates or notices or customer service. Employees who violate our privacy policies are subject to disciplinary action, up to and including termination. NACUA cannot guarantee the security of data transmitted via the internet.

How Long We Keep Your Personal Data

How Long We Store Your Personal Data:

We will store your Personal Data, in a form which permits us to identify you, for no longer than is necessary for the purpose for which the Personal Data is processed. As a membership-based association, this includes data collected in connection with your NACUA membership, access to the NACUA Resource Library and NACUANET, registration for continuing legal education programs and events (such as the Annual Conference and CLE Workshops), and use of other member services and online resources. We may retain and use your Personal Data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements and rights, or if it is not technically reasonably feasible to remove it. Consistent with these requirements, we will try to delete your Personal Data promptly upon request.

Retention:

We will retain your information, including membership records and financial data, for as long as necessary to provide you with access to our site, member resources, educational programming, and other services offered through NACUA. Please note that membership records (such as membership status, institutional affiliation, and participation history) and financial information (such as dues payments and transaction records) are retained permanently as part of our legitimate and necessary business interests — this data is not deleted when a membership becomes inactive or lapses. Upon request, we may remove certain personal and demographic information, such as your contact details, profile information, and other personally identifiable data that is not tied to membership records or financial tracking. If you wish to request removal of your personal or demographic information, please contact us at nacua@nacua.org. You may also reach our membership team directly at nacua@nacua.org or by calling 202.833.8390. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We maintain one or more databases to store your Personal Data and may retain such information for the period required by applicable law or as otherwise necessary for legitimate association purposes.

Managing Your Personal Data

You may contact us to correct, update, or delete your personal data. Requests can be made via email at nacua@nacua.org or by calling (202) 833-8390. Please note that certain data may be necessary for providing our services, and its deletion may impact our ability to deliver these services.

Children’s Privacy

Our website is intended for users over 13 years of age. NACUA does not knowingly collect personal data from children under 13.

Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any changes will be posted on this page, and we will notify you of significant changes.

Last updated: April 2026

Governing Law

This Privacy Policy is governed by the laws of the District of Columbia, USA. Any disputes arising from this policy will be resolved under the jurisdiction of the District of Columbia.

Contact Us

For further information or questions about this Privacy Policy, please contact us at nacua@nacua.org or (202) 833-8390.