Admissions Privacy Statement

The mission of the MIT Sloan School of Management is to develop principled, innovative leaders who improve the world and to generate ideas that advance management practice.  To help recruit, evaluate, admit, and enroll such qualified candidates, it is necessary to collect and process certain personal information about prospective students and their families. This Privacy Statement explains how MIT Sloan collects, uses, and processes personal information about prospective students and their families for purposes of recruitment, admissions, and enrollment. 

What personal information we collect
We collect, use, store, and transfer different kinds of personal information about you, which we have grouped together as follows:

• Biographic information – name, gender, marital status, citizenship, photograph, video, sexual orientation,* visa status, and passport numbers and/or photos

• Contact information – home and business addresses, phone numbers, email addresses, phone numbers, email addresses, and social media information

• Education and test scores – previous educational institutions, standardized test scores, school activities, prior disciplinary history

• Employment history – employer, address, job title, employment history, salary, and work experience

• Financial Information – tax identification numbers, wages, scholarships, grants, and family support

* These categories of personal information are only collected with your explicit consent.  The provision of such information is entirely optional and voluntary.  Whether you consent to provide such information has no bearing on the admissions decision or any other action MIT Sloan takes with respect to your application.

How we collect personal information about you
We collect information about you from a variety of sources.  A significant portion of the information we maintain is that which you have provided to us, including through events you have attended and your application materials.  We may also augment the information we collect about you from other sources, such as third-party testing and verification services, recommenders, alumni, and current students with whom you may have a personal connection.

Use of Cookies
We collect certain information regarding your use of this site, such as your IP address and browser type. Your session and the pages you visit will be tracked, but you will remain anonymous. We may use your IP address to identify the general geographic area from which you are accessing this site. 

How we use your personal information
We collect, use and process your personal information (1) to process transactions requested by you and meet our contractual obligations; (2) to facilitate MIT Sloan’s legitimate interests, and/or (3) with your explicit consent, where applicable. If you have concerns about any of these purposes, or how we communicate with you, please contact us at mbaadcom.mitsloan@mit.edu. We will always respect a request by you to stop processing your personal information (subject to our legal obligations).

When we share your personal information
To perform the functions listed above, it may be necessary to share your personal information with other MIT offices, such as the Registrar, Resource Development, Student Affairs, MIT Alumni Association, Financial Aid, International Students, Career Development, and Academic Programs. We may also share your personal information with third parties performing services under contract with us.

How your information is stored and secured
MIT Sloan uses risk-assessed administrative, technical, and physical security measures to protect your personal information. Only authenticated users with specific permissions may access the data using a virtual private network. We use firewalls and regular monitoring to evaluate any attempts at accessing the systems without permission. We conduct an annual security audit of our systems.

How long we keep your personal information
We consider our relationship with the MIT Sloan community to be lifelong. This means that we will maintain a record for you until such time as you tell us that you no longer wish us to keep in touch. After such time, we will retain a core set of information for MIT Sloan’s legitimate purposes, such as archival, scientific and historical research and for the defense of potential legal claims. 

Rights for Individuals in the European Economic Area
You have the right in certain circumstances to (1) access your personal information; (2) to correct or erase information; (3) restrict processing; and (4) object to communications, direct marketing, or profiling. To the extent applicable, the EU’s General Data Protection Regulation provides further information about your rights. You also have the right to lodge complaints with your national or regional data protection authority. 

If you are inclined to exercise these rights, we request an opportunity to discuss with you any concerns you may have. To protect the personal information we hold, we may also request further information to verify your identity when exercising these rights. Upon a request to erase information, we will maintain a core set of personal data to ensure we do not contact you inadvertently in the future, as well as any information necessary for MIT archival purposes. We may also need to retain some financial information for legal purposes, including US IRS compliance. In the event of an actual or threatened legal claim, we may retain your information for purposes of establishing, defending against, or exercising our rights with respect to such claim.

By providing information directly to MIT, you consent to the transfer of your personal information outside of the European Economic Area to the United States. You understand that the current laws and regulations of the United States may not provide the same level of protection as the data and privacy laws and regulations of the EEA. 

Additional Information
We may change this Privacy Statement from time to time. If we make any significant changes in the way we treat your personal information we will make this clear on our website or by contacting you directly.

The controller for your personal information is MIT. We can be contacted at dataprotection@mit.edu. 

This policy was last updated in July 2023.