New Rules for Forwarding Employee Emails

Starting in the second half of 2025, Masaryk University will restrict the automatic forwarding of employee emails to private and external email accounts. The goal of this measure is to enhance the protection of personal and sensitive data.

25 Jul 2025

Email forwarding (also known as automatic forwarding) increases the risk of data leakage. Without realizing it, users often exchange personal data, sensitive information, trade secrets, or unpublished scientific knowledge via email. When emails are forwarded, this information leaves the university’s IT systems, making it impossible to ensure their protection.

For this reason, the Institute of Computer Science (ICS) has prepared new rules for forwarding employee emails.

From August 4, 2025, it will no longer be possible to set up new forwarding of work emails from M365 accounts (uco@muni.cz and surname@department.muni.cz) to addresses outside Masaryk University and to addresses outside authorized providers. This measure applies to all employees regardless of their type of employment.

Forwarding will still be allowed to so-called authorized providers – primarily addresses with the muni.cz domain, addresses of academic and educational institutions, and addresses of Brno hospitals.

This measure applies only to newly set up email forwarding from M365. Existing forwarding will remain unchanged until the end of 2025. It will also remain possible to use your own email client to access your mailbox.

Do you use email forwarding in M365? Check your settings and prepare for changes

In the coming months, Masaryk University will gradually restrict and eventually completely block existing email forwarding to addresses outside the list of authorized providers. Blocking will take place in several phases, and up-to-date information about the process will be available at it.muni.cz.

Plan for Blocking Email Forwarding

  1. Users with email forwarding to addresses outside the list of authorized providers will be identified.
  2. These users will receive an email notification with instructions to change their settings. The notification will include guides and detailed information about when their forwarding will be automatically canceled.
  3. The email notification will specify a deadline, after which the forwarding will be automatically canceled.

If you currently forward emails to an address outside the list of authorized providers, we recommend adjusting or disabling this forwarding in time using the User Account Management application in MU’s INET system.

These measures are based on MU Directive 10/2017 (Article 3) and reflect recommendations from the National Cyber and Information Security Agency (NÚKIB) on improving the security of email communication.

Frequently Asked Questions

What is email forwarding?

Email forwarding is the automatic sending of email messages to an address other than the original one. In the M365 environment, this function is governed by the above-mentioned rules and can be set in the User Account Management application in MU’s INET system.

I don’t use email forwarding. Do I need to do anything?

No, you don’t need to change anything. Your settings are already safe and correct.

I have email forwarding set up. What should I do?

If you already have email forwarding set up, check in INET whether your emails are being forwarded to a authorized provider.

Where can I find the list of authorized providers?

Authorized providers include Masaryk University and its units, selected academic and educational institutions, and local hospitals (currently MUNI, CEITEC, Masaryk memorial cancer institute, St. Anne's university hospital Brno, University hospital Brno and Brothers of Charity Hospital Brno.

Is the list of authorized domains final?

The list was created based on an analysis of the current situation and will be updated based on feedback and user suggestions. If you wish to propose adding another authorized provider, please send your suggestion with justification to emailadm@ics.muni.cz.

I forward my emails to a domain outside the list of authorized providers. What will happen?

Existing email forwarding will continue to work for now. However, in the future, forwarding will be restricted to authorized providers only. We therefore recommend disabling this forwarding.

When will you cancel existing forwarding to non-authorized domains?

Forwarding will be canceled in several stages throughout 2025. By the end of August 2025, the first targeted notifications with instructions for changes and information about blocking will be sent. The notifications will include a three-month deadline, after which the forwarding will be automatically canceled.

When and how will I find out about the blocking date?

You will be informed by email. Notifications about unauthorized forwarding will be delivered to your uco@muni.cz mailbox in M365 and forwarded according to your current forwarding settings. Notifications will be sent repeatedly.

Does this restriction also apply to the IS MU email account?

No. The above rules for email forwarding apply only to employee email accounts in M365. IS MU has its own mailbox management and its own rules for implementing security measures.


More articles

All articles

You are running an old browser version. We recommend updating your browser to its latest version.