GDPR
Information about the University’s work to implement new data protection legislation.
Information about the University’s work to implement new data protection legislation
Data protection legislation gives rights to people about whom we hold information and gives us responsibilities regarding that information. Data protection legislation will change on the 25th May 2018 when the General Data Protection (GDPR) comes into force replacing the existing Data Protection Act 1998.
The University is currently in the process of implementing the requirement of the GDPR, and have used the Information Commissioners Office 12 – steps to take now. More information will be published on this website in due course.
Further information on GDPR can be found at the Information Commissioners GDPR pages.
University Guidance and Updates
Training - Updated April 2018
The University has developed training which is mandatory for all staff and will cover cyber security and data protection, further information on this training is available by clicking here (hyperlink back to the training section of this website).
Data Protection Policy
A new data protection policy which is written, specifically with GDPR in scope can be found by clicking here (hyperlink back to the policy section of this website).
Data Protection by Design
Work has been undertaken to refresh the University’s approach to Data Protection By Design and further information can be found by clicking here (hyperlink back to the compliance checklist section of this website).
Information Security Incidents
A requirement of GDPR is that, where applicable, data breaches are reported to the ICO within 72 hours, should you become aware of an issue the university has a new process to follow, click here to find out more (hyperlink back to the data breaches section of this website).