The University needs to process certain information about its employees, students and other individuals. In so doing, the University must comply with the General Data Protection Regulation 2018.
The University code of practice on data protection, owned by the Secretariat, explains the University's approach to compliance with data protection law, how data can be accessed and the obligations on staff and students who come into contact with personal data. The University data protection website provides current advice and guidance.
The University Retention Schedule (PDF), provides guidance for staff on how long different types of records should be kept for.
The request form for access to personal data (PDF) can be used by individuals who wish to access the data the University holds about them Any request for access to data, or in relation to individual rights regarding personal data, should be forwarded to Rebecca Messenger-Clark in the Secretariat at firstname.lastname@example.org.