Information Management and Data Security

Policy Purpose

The purpose of this policy is to safeguard the information assets and technology systems of the University of Duhok (UoD) from unauthorised access, modification, loss, or disclosure. It aims to ensure confidentiality, integrity, and availability of data.

Data Classification

• Confidential: Restricted access to sensitive data (financial, personal, legal).
• Internal Use Only: Data intended for institutional internal use.
• Public: General university announcements and public research.
• Restricted Data: Highly sensitive operational and system records.

KRG Legal Compliance

Applies KRG Copyright Law No. 17 (2012), KRG Misuse of Communications Devices Law No. 6 (2008), and Articles 327/437 of the Iraqi Penal Code No. 111 (1969).