Purpose: To protect the privacy rights of individuals, including volunteers and visitors, by establishing guidelines that govern the collection, use, disclosure, retention, and disposal of personal information per applicable laws. This policy outlines the commitment of the facility to respect confidentiality and ensure the secure handling of sensitive data.

The Cyber Warfare Range is a disruptive learning environment. Volunteers and visitors cannot expect to have digital protections. This includes privacy within the context of Cyber Warfare Range activities. Including computers, devices, and the electromagnetic spectrum. While we endeavor to respect and maintain a digitally safe respect for the individual, the nature of exploration and research of a range of environments could compromise systems attached to the range of technologies. Any personal information obtained or viewed from activities within the Cyber Warfare Range will not be permanently stored.

Policy Statement:

1. The facility will collect, use, and disclose personal information only for purposes that are consistent with its mission, objectives, and legal requirements. Personal information refers to any factual or subjective information, recorded or not, about an identifiable individual.
2. Volunteers and visitors shall be informed of the purpose(s) for which their personal information is being collected at or before the time of collection, unless the law permits otherwise. This may include providing a written notice or posting relevant information on the facility's website or premises.
3. The facility will obtain voluntary, explicit consent from individuals before collecting, using, or disclosing their personal information, except where permitted by law (e.g., in cases of emergency). Consent can be given through written, verbal, or implied means.
4. Personal information collected by the facility shall only be used and disclosed for the purposes stated at the time of collection, unless the individual provides consent for a new purpose or as required by law (e.g., to comply with legal process).
5. The facility will take reasonable measures to ensure that personal information is accurate, complete, and up-to-date for its intended use. Individuals have the right to access their personal information held by the facility and request corrections if necessary.
6. Personal information shall be retained only as long as it remains relevant to the purposes for which it was collected or as required by law. Upon expiration of this retention period, the information will be securely destroyed, erased, or made anonymous.
7. The facility will implement reasonable security measures to protect personal information against unauthorized access, disclosure, modification, or destruction. These measures may include physical, technical, and administrative safeguards appropriate to the sensitivity of the data.
8. Volunteers and visitors are responsible for maintaining the confidentiality of any sensitive or proprietary information they encounter during their involvement with the facility. They shall not use this information for personal gain or disclose it to unauthorized individuals without prior consent from the facility.
9. This policy will be communicated to volunteers and visitors through various means (e.g., posted notices, orientation sessions) to ensure that they are aware of their rights and responsibilities regarding privacy and confidentiality.
10. The facility reserves the right to update this Privacy and Confidentiality Policy periodically in response to changes in legal requirements or best practices related to information management. Any significant changes will be communicated to affected parties, and their consent will be sought where required by law.

By adhering to this Privacy and Confidentiality Policy, we aim to create a trustworthy environment for all individuals involved with our facility while respecting their right to privacy and confidentiality. We encourage open communication and feedback regarding our policies and procedures to ensure that they remain effective in protecting the sensitive information entrusted to us.