Acceptable Use Policy

1 Purpose & scope

The purpose of this Policy is to protect the University community and its information assets from harm arising from misuse of IT resources, whether deliberate or accidental. It applies to all use of NADI and connected systems, on any device, on or off campus, using University or personal equipment. Where you act on behalf of the University, you must also comply with any additional rules that apply to your role.

2 Access & account responsibility

• Access to NADI is granted to identified individuals and is not transferable. You are responsible for all activity carried out under your account.
• Keep your credentials confidential. Do not share your password, one-time codes or sign-in session with anyone, and do not use another person’s account.
• Sign out of shared or public devices, and report any suspected compromise of your account immediately (see Section 10).
• Use your access only for purposes you are authorised for, and only while you remain entitled to it.

3 Acceptable use

NADI and University IT resources are provided primarily for education, research, administrative and other legitimate University activities. Reasonable and incidental personal use is permitted provided it:

• Is lawful, honest and respectful of others;
• Does not interfere with your duties or studies, or with others’ use of the systems;
• Does not consume University resources excessively; and
• Does not bring the University into disrepute.

4 Prohibited activities

You must not use NADI or University systems to:

• Gain unauthorised access — attempt to access accounts, data or systems you are not authorised to use, or to circumvent security or access controls;
• Compromise security — introduce malware, run scanning or penetration tools, or probe for vulnerabilities without explicit written authorisation;
• Misuse data — access, copy, alter, share or delete information without authorisation, including other people’s personal or academic data;
• Engage in academic or financial dishonesty — including impersonation, falsifying records, or manipulating marks, payments or requests;
• Distribute unlawful or harmful content — material that is defamatory, harassing, discriminatory, obscene, or that infringes intellectual-property rights;
• Disrupt services — degrade, overload or interfere with the platform or network, or the use of it by others;
• Conduct unauthorised commercial activity — use University resources for private business, advertising or political campaigning; or
• Misrepresent the University — send communications that falsely appear to originate from or be endorsed by UBD.

5 Security obligations

• Use strong, unique passwords and enable any additional authentication the University requires.
• Keep devices you use to access NADI patched, protected and locked when unattended.
• Do not disable or evade security measures put in place by the University.
• Report lost devices, phishing attempts, suspected breaches or unusual account activity promptly.

6 Data & confidentiality

Much of the information in NADI is personal or confidential. You must handle it in line with the Privacy Notice and University data-protection requirements: access only what you need for a legitimate purpose, keep it secure, do not retain copies longer than necessary, and do not disclose it to anyone not authorised to receive it. Obligations of confidentiality continue after you leave the University.

7 Monitoring & privacy

To protect its systems and community, the University logs and may monitor use of NADI for security, operational, audit and compliance purposes, in accordance with the Privacy Notice and applicable law. Monitoring is proportionate and is not intended to routinely inspect the content of personal communications, but the University may access records where there is a legitimate need, such as investigating a suspected breach.

8 Breaches & enforcement

Suspected breaches of this Policy may be investigated by the University. Depending on the seriousness, the University may suspend or withdraw access, and may take disciplinary action under the relevant student or staff regulations, up to and including dismissal or exclusion. Unlawful activity may be referred to the relevant authorities. The University will act fairly and proportionately, and access may be suspended immediately where necessary to protect people or systems.

9 Changes to this Policy

The University may update this Policy from time to time. The “Effective date” above shows when it was last revised, and continued use of NADI after an update constitutes acceptance of the revised Policy.