Berkeley Employee Use of Email

Information on how to turn off automatic forwarding can be found here:

https://berkeley.service-now.com/kb?id=kb_article_view&sysparm_article=KB0014574

Some examples of approved domains are: @berkeley.edu, other UC campuses, and affiliated labs.

Some examples of unapproved domains are consumer email services: @gmail.com, @yahoo.com, @hotmail.com, @me.com, etc.

Yes, UC Berkeley employees can occasionally forward individual emails to non-UC Berkeley email accounts, provided that the email does not include sensitive information, including, but not limited to, information classified at the P3 or P4 level per UC Berkeley's data classification standard

Submit this form to request an automatic email forwarding exception.

Please note: In most cases, you will receive a response to your exception request within 2 weeks, but please allow up to 30 days for more involved requests. 

Automatic forwarding for SPAs will be reviewed on a case by case basis. SPA members will be contacted to discuss their automatic forwarding needs.

Yes, automatic forwarding between any Berkeley email accounts is allowed.

Yes, the UC systemwide Electronic Communications Policy governs email service for all University of California institutions. Email service at these institutions meets security and privacy requirements and forwarding emails between them is generally allowed, but will require an exception. We are still developing the service request and exception request process, but you can let us know here if you would like to be contacted when more information is available.  

Yes, you will be able to request an exception to allow you to forward email between your Berkeley email account and a University of California-managed lab. However, please be aware that messages forwarded from your UC Berkeley email account to a national lab email account will lose the privacy protections granted by the UC Electronic Communications Policy. Further information about service changes in support of this policy will be forthcoming. We are still developing an exception request process, but you can let us know here if you would like to be contacted when more information is available.

We strongly advise against forwarding your personal email to your bMail account for many reasons. If a Berkeley employee receives a Public Records Act Request or a Freedom of Information Act Request, the contents of their bMail account, including personal emails forwarded to it, are subject to review. In addition, Google no longer offers UC Berkeley unlimited storage. Berkeley’s Google accounts (including bMail) are currently limited to 150 GB.

No, automatic forwarding of Berkeley email to a personal email account, for any duration of time, is not permitted. Employees who wish to remain apprised of important Berkeley emails while on leave may create filters to mark some emails as important. Then, rather than review all of their Berkeley email, they can log into their account and review only those that are filtered. Learn how to create filters

No, if you are an employee or affiliate you will neither be able to directly access, nor forward emails from your Berkeley email account after your grace period has ended. Follow these steps in preparation for your departure

Learn more about Berkeley email and other resources offered.

All employees of UC Berkeley including faculty, staff, and student employees are required to use their @berkeley.edu email address for university business. Related policies on this topic include:

• UC’s IS-3 Policy requires specific security controls based on the Protection Level of Institutional Information. 

• UC Procurement Policies and UC’s IS-3 (Sec 15) both require specific contract language and security protections for third-party vendors handling institutional information. Private email service providers have not agreed to these terms. They have no contractual obligations to UC and have not been evaluated for security or privacy compliance.

Use of a non-Berkeley email for university business exposes the campus and its community members to risk for many reasons, including the following. 

1. Email is a highly targeted vector for cyberattacks, requiring robust security controls to protect it adequately. Berkeley IT identifies and blocks malicious emails to Berkeley email accounts. Berkeley’s email provider also has contractual obligations with respect to the security and privacy of bMail. The campus has no control or assurances regarding the protection of email in non-Berkeley services.

2. University employees cannot appropriately respond to legal holds and Public Records Act Requests for communications outside centrally supported services. 

3. Because there is no contractual obligation to do so, a non-Berkeley email provider may not inform users if they are the subject of a Public Records Act Request, Freedom of Information Act Request, or other legal requests for information. The person may not know that information has been requested or provided from their account. 

4. If a Berkeley employee receives a Public Records Act Request or a Freedom of Information Act Request, and they have been using a personal email for university business, their entire personal email account may be subject to review. 

5. Every email containing FERPA-protected information that is sent to an email provider without a specific contractual designation (any non-berkeley.edu account) is considered a FERPA violation.

6. Authentication logs and other forensic information critical for investigating security incidents are generally not available for email outside centrally supported services.

7. Berkeley IT staff are unable to investigate complaints regarding abuse and/or misuse of emails originating from non-Berkeley addresses.