Why can't we forward emails to mailboxes outside the university?

You may have seen our recent announcement about new rules banning the forwarding of employee emails to private accounts.

We understand this restriction may be frustrating for some, but it is an important step in preventing security incidents. When work-related messages are sent to personal email accounts, the information is handled by third-party providers. This increases the risk of data leaks outside the university — especially since many free email services reserve the right, under their terms and conditions, to use mailbox data in various ways.

At MU, many staff members work with confidential or sensitive information that must be kept secure. Forwarding to any address outside the approved list also violates MU Directive 10/2017. In short: work data must be handled only using MU’s own systems or officially supported services.

As of 11 August, the university has disabled the option to set up new forwarding to unapproved domains (you can find the approved list here). During the autumn, the Institute of Computer Science will contact anyone with existing unauthorized forwarding to request its removal.

You can learn more in the full article on IT MUNI.