Data Protection Principles

AHEEN adheres to core principles from the DPA, UoN policies, and ICRC handbook, adapted for humanitarian education.

Principle	Description	Application to AHEEN
Lawfulness, Fairness, and Transparency	Processing must have a legal basis (e.g., consent, vital interests in emergencies) and be transparent to data subjects.	Inform beneficiaries via multilingual notices about data use in program enrollment; obtain consent where feasible, or rely on public interest for urgent aid.
Purpose Limitation	Data collected for specified purposes only; compatible secondary uses allowed if aligned.	Student data for enrollment/degrees only; no repurposing for marketing without consent.
Data Minimization	Collect only what is necessary, proportionate, and relevant.	Limit refugee profiles to essential fields (e.g., ID, emergency needs); avoid excessive biometrics.
Accuracy	Ensure data is accurate and updated; rectify errors promptly.	Verify student records annually; allow self-correction via secure portals.
Storage Limitation	Retain data no longer than necessary (e.g., 3–5 years post-program, per ICRC guidelines).	Auto-delete inactive profiles; review retention quarterly.
Integrity and Confidentiality	Protect against unauthorized access, loss, or breaches via security measures.	Encrypt all sensitive data; conduct regular audits.
Accountability	Demonstrate compliance through records, training, and a Data Protection Officer (DPO).	Appoint AHEEN DPO to be liaison with UoN DPO; maintain processing logs.