Data protection

GDPR - Policy

• Data Protection Policy - GDPR
• University activities – basis for lawful processing of personal data

The University is reviewing systems which store and process personal data. Please contact us with any questions.

Data Protection Officer (DPO)

The Director of Legal acts as the University’s Data Protection Officer. Their role is to monitor internal compliance, inform and advise on our data protection obligations, and act as a point of contact for data subjects and the Information Commissioner’s Office (ICO).

Data incidents

Any suspected data incident must be reported immediately to [email protected]. Further details of the breach reporting process are outlined in the Data Breaches Standard Operating Procedure below: 

• What to do if there is a data breach

Data incidents include:

• inappropriate access to/loss of personal data
• damage to the integrity of personal data
• a compromise in the security of personal data

If in doubt, please tell us. The faster we are aware of any issue, the greater the opportunity to reduce the risk to individuals.

Guidance on remote / home working

All staff working remotely should familiarise themselves with the data protection for remote working guide guidance.

Higher Education Statistics Agency (HESA)

HESA privacy information 

If you require further information about any data relating to you which may be held within Heidi Plus, please contact HESA Services Ltd by emailing [email protected].

Individual rights

View guidance on how to exercise your rights under GDPR

Interception of communications Standard Operating Procedure (SOP)

View Interception of communications SOP that outlines when the University may need to intercept secure and access relevant data that is stored on its system.

Working with international partners/suppliers

If any data subjects, data transfers or data processing is outside of the UK; country specific advice will be required from the team at [email protected]

Data Protection Champions

Each School and Professional Service has a nominated Data Protection Champion to support and advise.