No. George Mason employees and authorized individuals operating on behalf of George Mason are required to use their assigned George Mason email accounts for all university business (see Employees' Electronic Communications). Violations of this policy open the university to risks, including:
- Phishing: Using non-George Mason email to conduct university business can confuse the recipient and make it harder to differentiate official emails from phishing attempts.
- George Mason's email systems include robust protections against spam, phishing, and malware, as well as contractual obligations on the part of the provider. The university has no control or insight into protections that may or may not exist in non-George Mason email systems.
- ITS is unable to investigate complaints regarding abuse or misuse of emails that originate from non-George Mason addresses.
- The university must be able to respond to legal holds and Freedom of Information Act (FOIA) requests. Personal email accounts may become subject to scrutiny in response to a subpoena, FOIA request, or other legal actions if it becomes necessary to retrieve university-related emails.
- All email messages forwarded to George Mason email accounts become part of the university's electronic records and are archived in accordance with George Mason's data retention schedule and practices. Sending protected data, including Personally Identifiable Information (PII) or Family Educational Rights and Privacy Act of 1974 (FERPA) data, through a non-George Mason email provider violates state and federal regulations.
Employees who use their own devices for university work should ensure they are configured to use George Mason's email system for work communications.
Last modified: January 29, 2025