Privacy Shield and Safe Harbor
Self-Regulatory Frameworks Policy for the EU-U.S. Privacy Shield and the U.S.-Switzerland Safe Harbor
Huron Consulting Group Inc. and its wholly-owned US subsidiaries (collectively, “Huron”) participate in the EU-U.S. Privacy Shield Framework, including the Privacy Shield Principles and Supplemental Principles (collectively, the “Privacy Shield Principles”), regarding the collection, use and retention of personal information about data subjects in the European Union. To learn more about the EU-U.S. Privacy Shield program and to view Huron’s certification, please visit the Privacy Shield website. Huron subjects to the Privacy Shield Principles all personal information received from the EU in reliance on the Privacy Shield.
Huron also participates in the U.S.-Swiss Safe Harbor Framework ("Safe Harbor") and commits to the Safe Harbor Principles regarding the collection, use and retention of personal information from Switzerland. To learn more about the Safe Harbor program and to view Huron’s certification, please visit the U.S.-Swiss Safe Harbor website.
In compliance with these frameworks, this policy explains:
- What type of personal information we collect and why we collect it
- How we use that personal information
- The choices we offer, including how to access and update information
Types of personal information we collect
Huron collects personal information from individuals who visit our public website. We may also collect personal information from our suppliers and from individual representatives of our corporate customers.
When persons visit our publicly available website www.huronconsultinggroup.com, we may collect the following types of personal information:
- Contact information
- Event registrations and preferences
- Resume and applicant information for those applying to job openings
- Feedback and reviews or request for support
- Activities, interactions, preferences, transactional information and other computer and connection information (such as IP address) relating to use of our website and our services
When persons and companies conduct business with Huron, we may collect the following types of personal information:
- Contact information
- Financial and billing information
Why we collect personal information and how we use it
Huron collects and uses personal information in the following ways:
- Personalizing information about our services
- Personalizing your experience on our website
- Providing services and support to our customers
- Conducting business with our suppliers and other third parties
- Considering resumés and applications received by applicants for job vacancies with Huron entities, including all elements of the procedure leading up to making a decision whether to offer, subject to any appropriate background checks, the applicant a position
- Providing online education for teaching certificates and arranging temporary placements to enable students of such programs to obtain practical experience
- Other purposes disclosed at the time of collection or otherwise compatible with the above, the Privacy Shield Principles, and the Safe Harbor
In instances where information is transferred to Huron through a client data controller and Huron is acting as the processor, Huron will assist the client data controller in complying with the Privacy Shield Principles where applicable.
Why we share personal information and with whom we share it
Huron may share personal information we collect from individuals with the following types of third parties and for the following purposes:
- Subsidiaries who process personal information on behalf of Huron for the purposes of supporting and providing services to its customers
- Third party service providers contracted to provide services on behalf of Huron for discrete business purposes such as provision of IT related services, event planning, talent recruiting, and travel services
- Other corporate entities if Huron undergoes a business transition such as a merger, acquisition by another company, or sale of all or a portion of its assets
- Third party entities with whom Huron works in providing a service, such as educational establishments with whom Huron collaborates to provide training and certification, and organizations at which Huron arranges for students to obtain practical experience
Opting out, accessing, updating your personal information
We will retain your personal information for as long as needed to provide you services, comply with our legal obligations, resolve disputes and enforce our agreements. In instances where Huron is acting as the data controller, Huron will provide on a consent form, web page, or email footer directions as to how to opt out regarding whether your personal information is to be disclosed to a third party or used for a purpose that is materially different from the purpose(s) for which it was originally collected.
To the extent that Huron processes sensitive personal data, Huron adheres to the Choice Principle and the Sensitive Data Supplemental Principle, and obtains affirmative express consent consistent with those Principles, where applicable.
You have the right to access the personal information we possess and direct us to correct, amend or delete that information where it is inaccurate or has been processed in violation of the Privacy Shield/Safe Harbor Principles, as appropriate, in accordance with the Access Principles of the relevant framework. Huron may limit or deny access consistent with the Privacy Shield Principles and the Safe Harbor.
If you have questions, complaints or concerns regarding this Self-Regulatory Frameworks Policy or wish to access your personal information, or update, change or remove your personal information, please contact firstname.lastname@example.org, or send mail addressed to:
Huron Consulting Group Inc.
Attn: Chief Compliance Officer
550 W Van Buren ST, Chicago IL 60607
If you wish to opt out of receiving marketing or other communications, you can either respond using the opt‑out button in the relevant communication, or by contacting us by one of the methods listed above.
Huron takes reasonable and appropriate measures to protect personal information from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into due account the risks involved in the processing and the nature of the data.
Independent dispute resolution
When we receive written complaints we will follow up with the person who made the claim. For personal information from the EU processed by Huron under the Privacy Shield Principles, we have designated the International Centre for Dispute Resolution, a division of the American Arbitration Association ("ICDR/AAA") as our independent recourse mechanism to address complaints and provide appropriate recourse free of charge to individuals covered by the Privacy Shield. We encourage you to raise with Huron any complaints or concerns you have regarding Huron’s adherence to the Privacy Shield Principles prior to proceeding to ICDR/AAA. The website for submitting complaints to the ICDR/AAA can be found here.
Investigatory and enforcement powers of the FTC
Huron is subject to the investigatory and enforcement powers of the US Federal Trade Commission.
U.S.-Swiss Safe Harbor Independent Recourse Mechanism
If you have exhausted all other means to resolve your concern regarding a potential violation of Huron’s obligations under the Safe Harbor, you may seek recourse through an independent mechanism as described on the Safe Harbor website: Safe Harbor-Swiss Recourse Mechanism
Individuals covered by Privacy Shield may seek binding arbitration to determine, for residual claims, whether Huron has violated its obligations under the Privacy Shield Principles regarding your personal information and whether any such violation remains fully or partially unremedied – this option is only available for these purposes. For additional information about the Privacy Shield arbitration process, please visit the Privacy Shield website at Privacy Shield Arbitration.
Requirement to disclose
Huron may disclose personal information in special cases when we have a good faith belief that it is necessary to (a) conform to legal requirements or to respond to lawful requests by public authorities, including to meet national security or law enforcement requirements; (b) protect and defend our rights or property; (c) enforce the website Terms and Conditions; or (d) act to protect the interests of our users or others.
Transfers to Agents
If a third party service provider providing services to Huron processes personal information from the EU that is subject to the Privacy Shield in a manner inconsistent with the Privacy Shield Principles, Huron will be liable unless we can prove we are not responsible for the event giving rise to the damages.