What Is This Service?
This service allows individuals to submit Data Subject Rights (DSR) requests as required by the Maryland Online Data Privacy Act (MODPA) and the EU General Data Protection Regulation (GDPR). These laws grant individuals rights over their Personal Information (PI)—any data that can identify a person (e.g., name, email, phone number, address, student ID, medical history, etc.).
Users may submit one of the following request types based on their legal jurisdiction:
- Access: Receive a record of the personal information the college holds.
- Deletion: Request removal of personal information (where allowed by other laws such as FERPA or HIPAA).
- Correction: Request updates to inaccurate personal information.
- Object to processing: Request that the college stop processing personal information if based on legitimate interests, public interest, or for direct marketing.
- Review automated decision: Request that the college provide human intervention on certain automated decisions.
- Data Portability: Request a machine-readable record of the personal information the college holds
- Restrict processing: Request for the college to continue to store personal information but no longer, use, modify or delete it.
All requests submitted through this service follow a structured workflow to ensure proper review and fulfillment.
Where Can I Get It?
Submit a request using the Data Subject Rights Request Form on the AACC Service Portal. Choose the Option That Applies to You:
1. Data Subject Rights – Signed-In Users
For individuals who can log in with an active AACC account.
2. Data Subject Rights – Users Who Cannot Sign In
For individuals who do not have access to an AACC account or are unable to sign in. Additional identity verification will be required.
Additional Information
As a public institution of higher education in the State of Maryland, the College maintains employment and related records in accordance with applicable federal law, Maryland law, and the College’s approved records retention schedules. As a result, the College is not legally permitted to delete certain categories of records upon request.
The College is required to retain certain employment-related records for defined periods, including but not limited to:
- Federal wage and hour laws (e.g., payroll records)
- Federal and state anti-discrimination laws
- Leave and benefits administration laws
- IRS and tax reporting requirements
- Maryland State Archives retention schedules applicable to public institutions
- Audit, accreditation, and public records obligations
Accordingly, the following categories of information must be retained for legally mandated retention periods:
- Name and identifying information associated with employment records
- Payroll, tax, and banking records used for compensation processing
- Social Security number (as required for tax and reporting purposes)
- Benefits and health insurance enrollment records
- Job application materials and hiring documentation
- Personnel file materials
- Records relating to compensation, leave, and employment status
Retention periods vary by record type and are governed by federal law and Maryland records retention schedules. In most cases, personnel and payroll records must be retained for multiple years following separation of employment. If litigation, audit, investigation, or public records obligations apply, records may be retained longer as required by law. Public records retention schedules are available through the Maryland State Archives for individuals who wish to review applicable requirements.
Where permissible and not subject to legal retention requirements, the College will disable or archive former employee system access, remove public-facing directory listings where applicable, and ensure records are stored in accordance with data minimization and security practices.