All University web hosted services will be at risk of downtime every Tuesday between 7am to 9am.

IT Support Update – September 2020 - Due to ongoing challenges presented by Covid-19 and the increased level of support required, we are seeing an unprecedented increase in demand for support and you may experience delays when requesting assistance from the IT Team. To help us better prioritise our workload and staffing, please only contact us on our phone lines for urgent requests to report a loss of service and direct all other requests to us via the IT Portal. Please be assured that we are doing everything we can to reduce these delays..

Jump to accessibility statement Skip to content

Information Governance Policies


Technical Services / Cyber Security and Information Governance / Information Governance / Information Governance Policies
IT service desk

Information Governance Policies

This section contains a brief overview of the Information Governance Policies of the University of Sunderland, including links to the full policies. 

Data Protection Policy - At a glance

Data Protection is the responsibility of all staff that handle personal information of our staff or our students (data subjects) below are some key points from the University of Sunderland Data Protection Policy, the full policy document can be found here.

  • The Data Protection Policy applies to all staff that handle personal information for or on behalf of the University of Sunderland.
  • The University will comply with the principles of the General Data Protection Regulations when processing personal information.
  • Personal data will only be processed where one or more legal basis for processing this data applies.
  • The University will undertake an assessment of new or significantly changed methods of processing to ensure risks of the processing can be understood and effectively managed.
  • The minimum information classification applied to personal data will always be restricted, and for special category information confidential.
  • The University will ensure that all requests relating to personal data are handled in line with the expectations of the General Data Protection Regulations.
  • In the event of a data breach the University will assess the severity of the breach and where applicable will report the incident to the Information Commissioners Office no later than 72 hours after becoming aware of the breach.
  • The University will provide mandatory training in Data Protection to all staff