• Section 1 - Purpose
• Section 2 - Application
• Section 3 - Roles and Responsibilities
• Section 4 - Acceptable use of Information and Communications Technology Resources
• Section 5 - Unacceptable use of Information and Communications Technology Resources
• Section 6 - Inadvertent Unacceptable Use
• Section 7 - QUT Access Account
• Section 8 - Incidental Personal Use
• Section 9 - Use of Information and Communications Technology Resources for Approved Activities
• Section 10 - Monitoring and Detection
• Section 11 - Failure to Comply
• Breaches by Staff
• Breaches by Students
• Breaches by Other Users
• Section 12 - Definitions
• Section 13 - Delegations

Section 1 - Purpose

(1) QUT provides information and communications technology (ICT) resources to support its functions and activities and is committed to ensuring that these resources are used in a transparent and accountable manner. All members of the University community have a responsibility to use its ICT resources consistent with this commitment. Unacceptable use of the University's ICT resources may:

1. be detrimental to other students, staff and workplace culture;
2. undermine the University's reputation;
3. be unlawful or illegal;
4. expose the University to vicarious liability for a person's actions;
5. have a negative effect on productivity;
6. be detrimental or pose a security threat to the University's systems.

(2) This Policy sets out the University's behavioural expectations for the use of its ICT resources. The use of all ICT resources is monitored and any unacceptable use will be investigated.

Section 2 - Application

(3) This Policy applies to any member of the University community utilising QUT's ICT resources, services and/or facilities both on and off campus, including:

1. Students;
2. Staff, whether full-time, part-time, ongoing, fixed-term, casual or sessional;
3. Individuals associated with QUT including:
   1. individuals who have been granted access to QUT property, services or infrastructure (for example, temporary staff engaged by QUT through an employment agency);
   2. consultants and independent contractors undertaking services for QUT;
   3. members of QUT Council or other University committees whether they hold office by election, nomination or appointment;
   4. visiting and adjunct academics, or other academic or research collaborators;
   5. volunteers who contribute to or act on behalf of the University.

Section 3 - Roles and Responsibilities

Section 4 - Acceptable use of Information and Communications Technology Resources

(4) QUT provides ICT resources to support its teaching and learning, research, administrative and business activities, and expects that these resources will only be utilised for the appropriate and legitimate performance of these activities. Acceptable use of the University's ICT resources will:

1. be consistent with Commonwealth or State laws;
2. be consistent with the University's behavioural expectations as defined in the QUT Code of Conduct - Staff and QUT Code of Conduct - Student and compliant with other policies, and Schedule 1, Part 3, section 12 of the Queensland University of Technology Act 1998;
3. be within any quota or cost limit imposed by the University;
4. be in accordance with any lawful direction of a University officer or an authorised officer under the QUT Act; and
5. maintain the security of the University's ICT resources and facilities.

Section 5 - Unacceptable use of Information and Communications Technology Resources

(5) Any of the following activities constitute unacceptable use of the University's ICT resources:

1. breaching any Queensland State or Commonwealth law;
2. breaching the University's behavioural expectations, including not complying with the QUT Code of Conduct - Staff and the QUT Code of Conduct - Student;
3. disobeying a lawful direction given by a University officer or an authorised officer under the QUT Act;
4. receiving, accessing, downloading, displaying, transmitting and/or making available unacceptable material via any media, including personal storage devices connected to a QUT network;
5. overloading or monopolising ICT resources in a manner which adversely affects other users including unauthorised sending of electronic messaging to a large number of recipients that may initiate an IT service disruption;
6. breaching the University's expectations regarding personal responsibility for a user's QUT access account;
7. acting in a manner that compromises the security, confidentiality, integrity and availability of ICT resources;
8. excessive personal use.

(6) Any user making unacceptable use of QUT's ICT resources will be subject to disciplinary proceedings in accordance with F/1.11.11 Failure to comply.

Section 6 - Inadvertent Unacceptable Use

(7) Users who inadvertently receive or access unacceptable material must take immediate action to either delete such material or cease such access. Advice should be sought from the user's supervisor or from the HiQ Contact Centre if unacceptable material continues to be received.

Section 7 - QUT Access Account

(8) A user is responsible for any activity, transaction or publication of information which originates from their QUT access account. A user must accept responsibility for the use of their QUT access account prior to being granted access, or if requested to do so by the University. A user must not do any act which prejudices the security of their QUT access account including disclosing their password to any other person or allowing any other person to use their account.

Section 8 - Incidental Personal Use

(9) QUT recognises that ICT resources may be used for incidental personal use. Incidental personal use must be infrequent and minor, and must not breach this policy or interfere with University business operations or, in the case of staff users, with the performance of that staff member's duties. Incidental personal use of the University's ICT resources does not include any of the following:

1. maintaining or supporting a personal private commercial or non-commercial enterprise;
2. recruitment of members to, or soliciting donations for, political parties, political campaigns, or religious groups;
3. the transmission, viewing or publication of unacceptable material;
4. publication of internet sites or pages unrelated to University activities;
5. personal observations using inappropriate or offensive language;
6. a malicious or unlawful purpose;
7. use of QUT resources for personal financial gain.

Section 9 - Use of Information and Communications Technology Resources for Approved Activities

(10) QUT acknowledges that staff and students may use ICT resources to access unacceptable material as a result of approved activities arising out of their employment or studies. Students and staff must ensure approval for such activities is, in the first instance, given by their executive dean of faculty or head of division and subsequently registered with the Information Security Team via the Digital Workplace (QUT staff access only), prior to access or use occurring.

Section 10 - Monitoring and Detection

(11) QUT routinely logs network activity and scans QUT connected storage devices and may use this information to investigate faults, security breaches, unlawful or illegal activity and unacceptable use in accordance with this Policy and the Information Security Policy.

(12) Allegations that unacceptable use of the University's ICT resources has occurred may be reported to a staff member's Supervisor, a supervisor of an IT area, Vice-President (Digital) and Chief Digital Officer or the Chief Information Security Officer.

Section 11 - Failure to Comply

(13) QUT reserves the right to take disciplinary action against users who fail to comply with this Policy.

(14) Some breaches of this Policy may also have consequences for users under criminal or civil provisions of the general law (for example, if the breach contravenes the Criminal Code (Qld), the Crimes Act 1914 (Cth) or other laws). In certain situations, the University may be legally required to disclose information about unacceptable use of ICT resources to law enforcement agencies or other statutory authorities.

Breaches by Staff

(15) A breach of this policy by a staff member may be investigated and, depending on the nature of the alleged breach, may be referred, to be dealt with under the University's processes for the management of misconduct or serious misconduct (Disciplinary Action for Misconduct and Serious Misconduct Policy - Senior Staff, Enterprise Agreement (Academic Staff) Clause 45; Enterprise Agreement (Professional Staff) Clause 54) or unsatisfactory performance (Enterprise Agreement (Academic Staff) Clause 44; Enterprise Agreement (Professional Staff) Clause 53).

Breaches by Students

(16) A breach of this Policy by a student may be investigated and, depending on the nature of the alleged breach, may be referred, to be dealt with under the Management of Student Misconduct Policy.

Breaches by Other Users

(17) Other members of the University community (honorary appointments, contractors and visitors) who do not comply with this Policy may have their association with QUT terminated, or may have their rights of access to QUT's ICT resources, services, facilities or infrastructure revoked by the Vice-President (Digital) and Chief Digital Officer.

Section 12 - Definitions

Section 13 - Delegations

(18) Refer to Register of Authorities and Delegations (VC038) (QUT staff access only).