CINXE.COM

<!DOCTYPE html> <html class="no-js no-touch" lang="en" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/terms/" xmlns:foaf="http://xmlns.com/foaf/0.1/" xmlns:og="http://ogp.me/ns#" xmlns:rdfs="http://www.w3.org/2000/01/rdf-schema#" xmlns:sioc="http://rdfs.org/sioc/ns#" xmlns:sioct="http://rdfs.org/sioc/types#" xmlns:skos="http://www.w3.org/2004/02/skos/core#" xmlns:xsd="http://www.w3.org/2001/XMLSchema#"> <head><script type="text/javascript" src="/_static/js/bundle-playback.js?v=HxkREWBo" charset="utf-8"></script> <script type="text/javascript" src="/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("http://web.archive.org/web"); __wm.wombat("https://www.hesa.ac.uk/about/regulation/data-protection/notices/previous","20230201065042","http://web.archive.org/","web","/_static/", "1675234242"); </script> <link rel="stylesheet" type="text/css" href="/_static/css/banner-styles.css?v=S1zqJCYt" /> <link rel="stylesheet" type="text/css" href="/_static/css/iconochive.css?v=3PDvdIFv" />  <title>Collection notices (historical) | HESA</title> <meta name="viewport" content="width=device-width, initial-scale=1"/> <meta http-equiv="cleartype" content="on"/> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/> <link rel="apple-touch-icon-precomposed" sizes="57x57" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-57x57.png"/> <link rel="apple-touch-icon-precomposed" sizes="114x114" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-114x114.png"/> <link rel="apple-touch-icon-precomposed" sizes="72x72" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-72x72.png"/> <link rel="apple-touch-icon-precomposed" sizes="144x144" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-144x144.png"/> <link rel="apple-touch-icon-precomposed" sizes="60x60" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-60x60.png"/> <link rel="apple-touch-icon-precomposed" sizes="120x120" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-120x120.png"/> <link rel="apple-touch-icon-precomposed" sizes="76x76" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-76x76.png"/> <link rel="apple-touch-icon-precomposed" sizes="152x152" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-152x152.png"/> <link rel="icon" type="image/png" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/favicon-196x196.png" sizes="196x196"/> <link rel="icon" type="image/png" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/favicon-96x96.png" sizes="96x96"/> <link rel="icon" type="image/png" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/favicon-32x32.png" sizes="32x32"/> <link rel="icon" type="image/png" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/favicon-16x16.png" sizes="16x16"/> <link rel="icon" type="image/png" href="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/favicon-128.png" sizes="128x128"/> <meta name="msapplication-TileColor" content="#FFFFFF"/> <meta name="msapplication-TileImage" content="/sites/all/themes/hesa/favicons/mstile-144x144.png"/> <meta name="msapplication-square70x70logo" content="/sites/all/themes/hesa/favicons/mstile-70x70.png"/> <meta name="msapplication-square150x150logo" content="/sites/all/themes/hesa/favicons/mstile-150x150.png"/> <meta name="msapplication-wide310x150logo" content="/sites/all/themes/hesa/favicons/mstile-310x150.png"/> <meta name="msapplication-square310x310logo" content="/sites/all/themes/hesa/favicons/mstile-310x310.png"/> <script> var GTMID = 'GTM-WM8325T'; (function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); })(window, document, 'script', 'dataLayer', GTMID); (function (w, d, s, l, i) { var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'http://web.archive.org/web/20230201065042/https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', GTMID); </script> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="description" content="From time to time proposed new uses of data may arise which were not anticipated at the time the student or staff collection notice was made available. Where such situations arise HESA and its data controllers in common will consider the new proposed use and where appropriate take advice to ensure that the proposed new use is fair and lawful. HESA’s latest collection notices"/> <link rel="canonical" href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/notices/previous"/> <link rel="shortlink" href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/node/442"/> <link type="text/css" rel="stylesheet" href="http://web.archive.org/web/20230201065042cs_/https://www.hesa.ac.uk/files/css/css_fncS-7zbIZ96_cAOhMstFXZ9r7ch0ucyDNZ1bM59C0w.css" media="all"/> <link type="text/css" rel="stylesheet" href="http://web.archive.org/web/20230201065042cs_/https://www.hesa.ac.uk/files/css/css_8Mv8U09WxD3oamjWR5OQxfdZ76AR07ALOYFNEGDTvhk.css" media="all"/> <link type="text/css" rel="stylesheet" href="http://web.archive.org/web/20230201065042cs_/https://www.hesa.ac.uk/files/css/css_47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU.css" media="all"/> <link href="/web/20230201065042cs_/https://www.hesa.ac.uk/sites/all/themes/hesa/styles/basic.css" rel="stylesheet"/>  <link href="/web/20230201065042cs_/https://www.hesa.ac.uk/sites/all/themes/hesa/styles/deluxe.css" rel="stylesheet"/>  <link media="print" href="/web/20230201065042cs_/https://www.hesa.ac.uk/sites/all/themes/hesa/styles/print.css" rel="stylesheet"/>  </head> <body class="html not-front not-logged-in no-sidebars page-node page-node- page-node-442 node-type-page">  <noscript><iframe src="http://web.archive.org/web/20230201065042if_/https://www.googletagmanager.com/ns.html?id=GTM-WM8325T" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>  <a href="#main-content" class="element-invisible element-focusable">Skip to main content</a> <header class="header-site"> <div class="wrap"> <div class="inner"> <a class="toggle-nav-site" id="toggle-nav-site" href="#nav-site" aria-controls="nav-site" aria-expanded="false" aria-label="Toggle Main Navigation" role="button"></a> <a class="toggle-search" id="toggle-search" href="#search-block-form" aria-controls="search-block-form" aria-expanded="false" aria-label="Toggle Site Search" role="button"></a> <div class="primary"> <div class="logo"> <a href="/web/20230201065042/https://www.hesa.ac.uk/" title="Home" rel="home"> <img src="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/img/hesa-logo.jpg" alt="Home"/> </a> </div> </div> <div class="secondary"> <div class="region region-search-form"> <div id="block-search-form" class="block block-search"> <div class="content"> <form action="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/notices/previous" method="post" id="search-block-form" accept-charset="UTF-8"><div><div class="container-inline"> <h2 class="element-invisible">Search form</h2> <div class="form-item form-type-textfield form-item-search-block-form"> <label class="element-invisible" for="edit-search-block-form--2">Search </label> <input title="Enter the terms you wish to search for." type="text" id="edit-search-block-form--2" name="search_block_form" value="" size="15" maxlength="128" class="form-text"/> </div> <div class="form-actions form-wrapper" id="edit-actions"><input type="submit" id="edit-submit" name="op" value="Search" class="form-submit"/></div><input type="hidden" name="form_id" value="search_block_form"/> </div> </div></form> </div> </div> </div> </div> </div> </div> <nav class="nav-site" id="nav-site" aria-label="Main Navigation"> <div class="wrap"> <div class="region region-main-menu"> <div id="block-system-main-menu" class="block block-system block-menu"> <div class="content"> <ul class="menu"><li class="first leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/data-and-analysis" title="">Open data</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/collection" title="">Data Collection</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/support" title="">Support</a></li> <li class="last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about" title="">About</a></li> </ul> </div> </div> </div> </div> </nav> </header> <main id="main-content"> <div class="wrap" id="top"> <div class="breadcrumbs"><a href="/web/20230201065042/https://www.hesa.ac.uk/about">About us</a> » <a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation">Compliance and regulation</a> » <a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection">Data protection</a> » <a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/notices">Collection notices</a> » <a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/notices/previous" class="active">Collection notices (historical)</a></div> <h1>Collection notices (historical)</h1> <ul class="action-links"></ul> <div class="region region-content"> <div id="block-system-main" class="block block-system"> <div class="content"> <div class="grid grid-spaced"> <div class="content-aside | col-1/3 | col-reverse"> <div class="accordion-item"> <nav class="nav-sub" aria-label="Section sub-navigation"> <a href="#after-nav-sub" class="element-invisible element-focusable">Skip sub-navigation</a> <a class="accordion-toggle | toggle-nav-sub" href="#nav-sub-content" aria-controls="nav-sub-content" aria-expanded="false" role="button">Also in this section</a> <div class="js-accordion-content | nav-sub-content" id="nav-sub-content"> <ul class="menu"><li class="first last expanded active-trail"><a href="/web/20230201065042/https://www.hesa.ac.uk/about" title="" class="active-trail">About us</a><ul class="menu"><li class="first leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/contact">Contact and find us</a></li> <li class="expanded"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/engage">Engage with us</a><ul class="menu"><li class="first last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/provider-forum" title="">Provider forum</a></li> </ul></li> <li class="expanded"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/what-we-do">Who we are and what we do</a><ul class="menu"><li class="first leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/what-we-do/designated-data-body">Designated Data Body for England</a></li> <li class="last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/what-we-do/statutory-w-s-ni">Wales, Scotland and Northern Ireland</a></li> </ul></li> <li class="expanded active-trail"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation" class="active-trail">Compliance and regulation</a><ul class="menu"><li class="first expanded active-trail"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection" class="active-trail">Data protection</a><ul class="menu"><li class="first expanded active-trail"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/notices" class="active-trail">Collection notices</a><ul class="menu"><li class="first leaf active-trail"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/notices/previous" class="active-trail active">Collection notices (historical)</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/data-protection/notices/dlhe-c14018">Collection notice (DLHE C14018)</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/notices/dlhe-c15018">Collection notice (DLHE C15018)</a></li> <li class="last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/notices/dlhe-c16018">Collection notice (DLHE C16018)</a></li> </ul></li> <li class="expanded"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/guidance">Data protection guidance for the HESA records</a><ul class="menu"><li class="first leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/guidance/LDLHE-faqs-graduates" title="">Frequently asked questions for HE leavers 2010/11 survey</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/guidance/LDLHE-faqs-providers" title="">Frequently asked questions for HE providers 2010/11 survey</a></li> <li class="last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/guidance/LDLHE-agreement" title="">Data protection agreement between HESA and IFF Research</a></li> </ul></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/register">Data sharing register</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">Rounding and suppression</a></li> <li class="last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/ucas-data">HESA's processing of UCAS data</a></li> </ul></li> <li class="expanded"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/official-statistics">Official statistics</a><ul class="menu"><li class="first expanded"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/official-statistics/pre-release">Pre-release access to official statistics</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/official-statistics/confidentiality">Statistical confidentiality policy</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/official-statistics/revisions">Revisions policy</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/official-statistics/engagement-strategy" title="HESA user engagement strategy for statistics">User engagement strategy</a></li> <li class="last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/official-statistics/quality-report">Student record quality report</a></li> </ul></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/foi">Freedom of information</a></li> <li class="last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/complaints">Complaints</a></li> </ul></li> <li class="expanded"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/working-here" title="">Working here</a><ul class="menu"><li class="first last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/working-here/vacancies" title="">Current vacancies</a></li> </ul></li> <li class="last expanded"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website">Website and accessibility</a><ul class="menu"><li class="first leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website/site-map" title="">Site map</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website/terms">Terms of use</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website/accessibility">Accessibility statement</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website/cookies">Cookies</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website/privacy">Privacy</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website/eduroam">eduroam</a></li> <li class="last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website/esignatures">HESA's use of electronic signatures</a></li> </ul></li> </ul></li> </ul> </div> </nav> </div> </div> <div class="content-main | col-2/3" id="after-nav-sub"> <p>From time to time proposed new uses of data may arise which were not anticipated at the time the student or staff collection notice was made available. Where such situations arise HESA and its data controllers in common will consider the new proposed use and where appropriate take advice to ensure that the proposed new use is fair and lawful. HESA’s latest collection notices at <strong><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn" target="_self">www.hesa.ac.uk/fpn</a></strong> set out how data from the HESA Student record and HESA Staff record are currently being used. Graduate Outcomes Privacy Information is published at <a href="http://web.archive.org/web/20230201065042/http://www.graduateoutcomes.ac.uk/privacy-info">www.graduateoutcomes.ac.uk/privacy-info</a>. Previous collection notices and privacy information are set out below (jump to <a href="#staff">Staff</a>, <a href="#graduate-outcomes">Graduate Outcomes</a>)</p> <h3><strong>Previous Student Collection Notices</strong></h3> <p> Please note - the notices in the page below are partially updated automatically when the list of <strong>Purpose 1 - Public Functions</strong> data controllers is changed. To see the exact notice disseminated on the indicated date please download the PDF version.</p> <div class="accordion-item"><a aria-controls="Student2021" aria-expanded="false" class="accordion-toggle" href="#Student2021" name="Student2021" role="button">8 July 2021 to 6 June 2022</a></p> <div class="accordion-content" id="Student2021"> <h2><a id="student" name="student"><strong>Student collection notice 2021-2022</strong></a></h2> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_collection_notice_2021-2022.pdf">HESA_Student_Collection_Notice_2021-22.pdf</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Hysbysiad_Casglu_i_Fyfyrwyr_HESA_2021-22.pdf">Hysbysiad_Casglu_i_Fyfyrwyr_HESA_2021-22.pdf</a></p> <p>The Higher Education Statistics Agency Limited (HESA) is the body responsible for collecting and disseminating information about higher education in the UK and the designated data body for England (see <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about">www.hesa.ac.uk/about</a> for more information). HESA is a <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/key-definitions/controllers-and-processors/">Controller</a> of your information.</p> <p>Reference to “your provider” refers to the higher education provider which you attend. This notice relates to information about you which will be collected by your provider and passed to HESA and to other organisations as described below.</p> <p>This notice is applicable to the 2021/22 academic year. It is also applicable to data collected in previous academic years and retained by HESA. See <em>Categories of information submitted to HESA, including Special Categories of data</em>, below, for more information about the categories of data that will be collected in 2021/22 and that have been collected in previous years.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Review and Updates to this Notice</strong></p> </div> <p>This notice sets out information about HESA and other Controllers of your data, how and why they process your data, the legal bases for this processing, and your rights under data protection legislation. This notice is regularly reviewed and updated, for example when organisations change their name, or to clarify how your information is used. Updates may be made at any time and you will always find the most up to date version at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Submission of your information to HESA</strong></p> <p>Data about you will be supplied to HESA for the purposes set out below. All information is used in compliance with data protection legislation.</p> </div> <p>Every year your provider will send some of the information it holds about you to HESA (“your HESA information”). HESA is an official source of data about UK higher education. HESA is a registered charity and operates on a not-for-profit basis.</p> <p>Your HESA information is used for a variety of purposes by HESA and by third parties as described below. HESA may charge other organisations to whom it provides services and data. Uses of your HESA information may include linking parts of it to other information, as described below. Some information provided to HESA is retained indefinitely for statistical research purposes. Your HESA information will not be used to make automated decisions about you. The extent to which your HESA information will be used for purposes 4-5 and 8 will vary.</p> <p>HESA processes information about UK and other nationals, including EU nationals. Accordingly, all uses of HESA information must comply with the General Data Protection Regulation (“GDPR”) (including UK and EU versions) and the Data Protection Act 2018.</p> <p>HESA is developing a new system and a new data model for collecting student information through a programme called Data Futures. More information about this programme of work can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/innovation/data-futures">www.hesa.ac.uk/innovation/data-futures</a>. If your HESA information is processed as part of this programme it will be used by HESA and your provider to participate in a pilot of the new system and/or to check the accuracy of the new data model. Specifically, your HESA information will be used by HESA, your provider, and higher education funding and regulatory bodies participating in the Data Futures programme:</p> <ul> <li>in order to evaluate the new data model, the data to be used within and produced by the new system; and</li> <li>in order to evaluate system functionality (including how the new system interacts with pilot participants’ systems and with HESA’s existing legacy systems).</li> </ul> <p>If your HESA information is used as part of the Data Futures programme, then it will be deleted from that programme within 6 months of the end of the relevant testing phase.</p> <p>As the purpose of the Data Futures programme is to enable HESA to have a platform suitable for the public functions of the higher education sector, the lawful bases for this processing can be found in Purpose 1 (below). Processing relating to migrating data held within HESA’s permanent records to the new Data Futures data model is carried out under Purpose 8.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Categories of information submitted to HESA, including special categories of data</strong></p> <p>HESA collects data about the personal characteristics of students and information about their studies and qualifications. This might include sensitive details about students’ personal lives used for equality and diversity monitoring.</p> </div> <p>Data submitted to HESA by your provider includes details about the course you are studying, and any qualifications awarded to you during the academic year. It also includes details about you - such as your name and date of birth, your prior qualifications, and where you lived before and during your course.</p> <p>Information about your health, disability status, ethnicity, sexual orientation, gender reassignment or religion are classed as ‘Special Categories of data’ under the GDPR. If your provider discloses this information to HESA, it will be included in your HESA information. This information is necessary for monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j). This information will also be processed for statistics and statistical research. Your information will not be used to make decisions about you.</p> <p>Some other information is used to enable research into the provision of fair access to higher education, for example information as to whether you are a care leaver. If your provider is in England your HESA information may include details of any financial support, you may receive from your higher education provider.</p> <p>A full list of data items that may be included in your HESA information for the 2021/22 academic year will be available from October 2021 here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c21051">www.hesa.ac.uk/collection/c21051/</a>.</p> <p>- Please note that not all data items are collected for all students.</p> <p>If you were a student in a previous academic year, a full list of data items that may be included in your HESA information can be found below. Please note that multiple academic years are likely to apply to your HESA information depending on the length of your initial course(s) and of any further study.</p> <p>If you need any assistance in identifying which records your HESA information may be included in, please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#c6a2a7b2a7e8b6b4a9b2a3a5b2afa9a886aea3b5a7e8a7a5e8b3ad"><span class="__cf_email__" data-cfemail="40242134216e30322f34252334292f2e00282533216e21236e352b">[email protected]</span> </a>for guidance.</p> <div class="table-responsive"> <table border="1" cellpadding="1" cellspacing="1"> <thead> <tr> <th scope="col" style="width: 250px;">Student Record</th> <th scope="col" style="width: 250px;">Student Alternative Record (formerly known as AP Student Record)</th> <th scope="col" style="width: 250px;">Initial Teacher Training Record (ITT)</th> </tr> </thead> <tbody> <tr> <td style="width: 250px;"> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c20051">Student 20/21</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c19051">Student 19/20</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c18051">Student 18/19</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c17051">Student 17/18</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c16051">Student 16/17</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c15051">Student 15/16</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c14051">Student 14/15</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c13051">Student 13/14</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c12051">Student 12/13</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c11051">Student 11/12</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c10051">Student 10/11</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c09051">Student 09/10</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c08051">Student 08/09</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c07051">Student 07/08</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c06011">Student 06/07</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c05011">Student 05/06</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c04011">Student 04/05</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c03011">Student 03/04</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c02011">Student 02/03</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c01011">Student 01/02</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c00011">Student 00/01</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c99011">Student 99/00</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c98011">Student 98/99</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c97011">Student 97/98</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c96011">Student 96/97</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c95011">Student 95/96</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c94011">Student 94/95</a></li> </ul> </td> <td style="width: 250px;"> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c20054">AP Student 20/21</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c19054">AP Student 19/20</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c18054">AP Student 18/19</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c17054">AP Student 17/18</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c16054">AP student 16/17</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c15054">AP student 15/16</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c14054">AP student 14/15</a></li> </ul> </td> <td style="width: 250px;"> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c21053">ITT 21/22</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c20053">ITT 20/21</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c19053">ITT 19/20</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c18053">ITT 18/19</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c17053">ITT 17/18</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c16053">ITT 16/17</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c15053">ITT 15/16</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c14053">ITT 14/15</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c13053">ITT 13/14</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c12053">ITT 12/13</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c11053">ITT 11/12</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c10053">ITT 10/11</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c09053">ITT 09/10</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c08053">ITT 08/09</a></li> </ul> </td> </tr> </tbody> </table> </div> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 1 – Named data used for public functions by the HE funding and regulatory bodies</strong></p> <p>Your HESA information is used by HE funding and regulatory bodies (who request HESA to collect it) for their statutory and/or public functions including funding, regulation and policy-making purposes. Your information is provided by reference to your name, but your information will not be used to make decisions about you.</p> </div> <p>HESA shares your HESA information with the HE funding and regulatory body(s) who request HESA to collect it and require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the funding and regulatory bodies. HESA has been appointed as the designated data body for England under the <a href="http://web.archive.org/web/20230201065042/https://www.legislation.gov.uk/ukpga/2017/29/contents/enacted" target="_blank">Higher Education and Research Act 2017</a>. The HE funding and regulatory bodies are:</p> <p>England - <a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/privacy/" target="_blank">Office for Students</a> (who take into account what would be helpful to collect for sharing with UK Research and Innovation and the Secretary of State)<br/> Wales - <a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx" target="_blank">Higher Education Funding Council for Wales</a><br/> Scotland - <a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/about-sfc/how-we-operate/access-information/privacy-notice/privacy.aspx" target="_blank">Scottish Funding Council</a><br/> Northern Ireland - <a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice" target="_blank">Department for the Economy</a></p> <p>Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who have followed higher education courses in the UK. These organisations are also Controllers of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice. However, all uses of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA.</p> <p>These organisations will not use the data for the purposes of identifying you as an individual or to take decisions about you. These organisations may retain HESA information indefinitely for statistical and research purposes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 1</strong></p> <p>Legal basis for processing your information for Purpose 1 – these cover use of personal data by both HESA and the HE funding and regulatory bodies as data Controllers:</p> <p>Processing of your HESA information for Purpose 1 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (see GDPR Article 6(1)(e)) and for statistical and research purposes (see GDPR Article 89).</p> <p>Processing may also be necessary for compliance with a legal obligation to which the Controller may be subject (see GDPR Article 6(1)(c)).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 2 - Named data used for public functions by public authorities</strong></p> <p>HESA acts as an information hub to provide data and statistics on higher education. While the bodies described in Purpose 1 (above) have legal or regulatory power to require information from certain higher education providers, other public authorities also use your HESA information for their statutory and/or public functions including funding, regulation and policy-making purposes.</p> </div> <p><strong>Education statistics and data</strong></p> <p>HESA also acts as an information hub to provide information on higher education. In England, this is undertaken outside of HESA’s designated data body activities. HESA shares your HESA information with public authorities who require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the public authorities. Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who have followed higher education courses in the UK.</p> <p>These organisations are also Controllers of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice. However, all uses that they make of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA. These organisations will not use the data for the purposes of identifying you as an individual or to take decisions about you, except as described in Purpose 3 below. These organisations may retain HESA information indefinitely for statistical and research purposes, or for fixed terms depending on the terms of their data sharing agreements with HESA.</p> <p>The HE funding and regulatory bodies who receive information not collected under their relevant power, but who need it for their functions, are:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/privacy/" target="_blank">Office for Students</a> (for example, the OfS have power to collect information from providers in England, but also need information about providers in other parts of the UK for their public function)</li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx" target="_blank">Higher Education Funding Council for Wales</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/about-sfc/how-we-operate/access-information/privacy-notice/privacy.aspx" target="_blank">Scottish Funding Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice" target="_blank">Department for the Economy</a></li> </ul> <p>Education departments in England and the devolved administrations:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data" target="_blank">Department for Education</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://gov.wales/higher-education-statistics-agency-hesa-student-data-collection" target="_blank">Welsh Government</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.scot/publications/scottish-exchange-of-data-privacy-information/" target="_blank">Scottish Government</a></li> </ul> <p>Other bodies with public functions connected to education:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/department-for-business-energy-and-industrial-strategy/about/personal-information-charter" target="_blank">Department for Business, Energy and Industrial Strategy</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ukri.org/privacy-notice/" target="_blank">UK Research and Innovation</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/teaching-regulation-agency/about/personal-information-charter" target="_blank">Teaching Regulation Agency</a></li> <li>National Health Service bodies and organisations working with them e.g. <a href="http://web.archive.org/web/20230201065042/https://hee.nhs.uk/about/privacy-notice" target="_blank">Health Education England</a> and <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/department-of-health-and-social-care/about/personal-information-charter" target="_blank">Department of Health and Social Care</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gmc-uk.org/privacy-and-cookies" target="_blank">General Medical Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ucas.com/about-us/policies/privacy-policies-and-declarations/ucas-privacy-policy" target="_blank">UCAS</a></li> </ul> <p>and any successor bodies. Further Controllers may be added to the list from time to time – please see the online version of this notice at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p><strong>Other uses of named data</strong><br/> Your HESA information may also be used by some organisations who are also Controllers who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education. Such uses may include the following:</p> <ul> <li>Production of statistics in relation to the population of the UK and for statistical research, undertaken by the Office for National Statistics. Further information can be found on the <a href="http://web.archive.org/web/20230201065042/https://www.ons.gov.uk/aboutus/transparencyandgovernance/dataprotection" target="_blank">ONS website</a>.</li> <li>Production of statistics and statistical research undertaken by <a href="http://web.archive.org/web/20230201065042/https://www.nrscotland.gov.uk/Privacy" target="_blank">National Records of Scotland</a> and the <a href="http://web.archive.org/web/20230201065042/https://www.nisra.gov.uk/nisra-privacy-notice" target="_blank">Northern Ireland Statistics and Research Agency</a>.</li> <li>Monitoring of public expenditure by the <a href="http://web.archive.org/web/20230201065042/https://www.nao.org.uk/privacy-policy-and-cookies-statement/" target="_blank">National Audit Office</a>.</li> </ul> <p>The above list of organisations who may receive your HESA information will be subject to change over time. For example, HESA is seeking to reduce the burden on higher education providers by encouraging other organisations who currently collect information about students direct from higher education providers to collect and receive information through HESA. The above list will be updated on the HESA website at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a> from time to time, and you will need to monitor this link yourself if you wish to be aware of changes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 2</strong></p> <p>Processing of your HESA information for Purpose 2 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 3 - Administrative uses</strong></p> <p>Your named data may be processed by HESA for administrative purposes or by public authorities for the detection or prosecution of fraud. The uses of your HESA information by public authorities may result in decisions being made about you.</p> </div> <p><strong>HESA Administrative Uses</strong></p> <p><strong>HUSID look-up service</strong> – If you have been included in the Student record in previous years, your current higher education provider may use HESA’s look-up service to validate your student identifier (referred to as your HUSID). More information on HESA’s look-up service can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/support/tools-and-downloads/husid">https://www.hesa.ac.uk/support/tools-and-downloads/husid</a>.</p> <p><strong>Changing provider during your higher education studies</strong> – If during your study with a higher education provider, you transfer to another higher education provider or your course is delivered in collaboration with another higher education provider, it may be necessary for HESA to share information about you with your new provider to ensure you are correctly included in their relevant data submission to HESA. HESA may also be required to inform your previous provider that you are now studying elsewhere.</p> <p><strong>External Administrative Uses</strong></p> <p>In the exercise of their official authority it may be necessary for the UK higher education funding and regulatory bodies listed in Purposes 1 and 2 to use your HESA information which is passed to them for Purposes 1 and 2 to identify you and take decisions about you as an individual for the following purposes only:</p> <p><strong>Fraud detection and prevention</strong> - Your HESA information may be used to audit claims to public funding and student finance, and to detect and prevent fraud. This may include sharing your information with other Controllers (for example the Student Loans Company, Pearson Education).</p> <p><strong>Previous study</strong> - If your higher education provider is in England: The Office for Students may share your previous education records with this provider, including HESA information submitted by other higher education provider, to determine the nature of any prior higher education study, including your current qualifications. This may be used to make decisions about the fees you are required to pay, the support available to you or the availability of a place for you to study with a higher education provider. The Office for Students may also share the fact you are studying with a new provider with your previous provider.</p> <p>For these purposes your HESA information may be held separately (in addition to being held within data sets for Purpose 1) and retained for as long as necessary for the purposes of detection or prosecution of fraud and any associated legal or audit purposes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 3</strong><br/> Processing of your HESA information for Purpose 3 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 4 - HESA publications</strong></p> <p>HESA publishes statistics about students in higher education.</p> </div> <p>Part of HESA’s role is to produce and publish information about higher education in the public interest. This includes Official and National Statistics publications (<a href="http://web.archive.org/web/20230201065042/https://uksa.statisticsauthority.gov.uk/about-the-authority/uk-statistical-system/types-of-official-statistics/" target="_blank">https://uksa.statisticsauthority.gov.uk/about-the-authority/uk-statistical-system/types-of-official-statistics/</a>) and online business intelligence and research services.</p> <p>When producing this material for publication, HESA applies its disclosure control, the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA Standard Rounding Methodology</a>, to ensure that no Personal Data is included and that individuals cannot be identified from published  material.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 4</strong></p> <p>Processing of your HESA information for Purpose 4 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 5 - Equal opportunity, research, journalism and other processing for statistical and research purposes</strong></p> <p>HESA information is used for research into higher education and the student population. This research can be academic, commercial, journalistic or for personal reasons. HESA prohibits the identification of individual students by those carrying out this research and information is not shared on a named basis.</p> </div> <p>HESA and the other Controllers (see Purposes 1 & 2) may also supply information to third parties where there is a legitimate interest in doing so for statistical and research purposes. Examples of use for this purpose include:</p> <ul> <li>Provision of information to students and prospective students</li> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Creation and operation of analysis tools, for example, <a href="http://web.archive.org/web/20230201065042/https://www.jisc.ac.uk/heidi-plus" target="_blank">Heidi Plus</a></li> </ul> <p>Users to whom information may be supplied for Purpose 5 include:</p> <ul> <li>Higher education sector bodies including <a href="http://web.archive.org/web/20230201065042/https://www.jisc.ac.uk/analytics/jisc-and-hesa-data-protection" target="_blank">Jisc</a></li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties within Purpose 5 is supplied under contracts which require that individuals shall not be identified from the supplied information and this means that they also cannot use it to make decisions about you.</p> <p>A copy of HESA’s current agreement for the supply of tailored information is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">www.hesa.ac.uk/services/custom/data/timescales-costs</a>. Each agreement specifies the duration for which data may be processed. This is usually one year but may be longer, if necessary, for the specific research purpose. Each request for HESA information under Purpose 5 is assessed for its compliance with data protection legislation and its compatibility with this collection notice. HESA ensures that only the minimum amount of HESA information necessary for the specified research purpose is supplied to users. If the supplied information is to be published <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA's Rounding Methodology</a> or an equivalent disclosure control must be applied to ensure that individuals cannot be identified from the published material and it does not constitute Personal Data.</p> <p>A copy of HESA’s current agreement for access to Heidi Plus is <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Organisational Agreement for Access to Heidi Plus.pdf" target="_blank">available here</a>. Each agreement specifies the purpose for which the data may be processed.</p> <p>If you are a student at a provider in England, HESA information may be linked to school and/or further education college information and supplied to researchers either through direct supply to the researcher’s organisation or through the <a href="http://web.archive.org/web/20230201065042/https://www.ons.gov.uk/aboutus/whatwedo/statistics/requestingstatistics/approvedresearcherscheme" target="_blank">Office for National Statistics Secure Research Service</a>. This onward sharing to researchers is provided by the <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data" target="_blank">DfE Data Sharing Service</a>. Copies of the ‘Agreement for the Supply of Linked Data’ and of the ‘Agreement for Making Linked Data available in ONS SRS’ can be requested from <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#0b6f6a7f6a2578636a7962656c4b6e6f7e686a7f626465256c647d257e60"><span class="__cf_email__" data-cfemail="b7d3d6c3d699c4dfd6c5ded9d0f7d2d3c2d4d6c3ded8d999d0d8c199c2dc">[email protected]</span></a>.</p> <p>Your HESA information may be linked to school, college, employment, tax and benefits data by the Department for Education and may be supplied to researchers by the Department for Education through the <a href="http://web.archive.org/web/20230201065042/https://www.ons.gov.uk/aboutus/whatwedo/statistics/requestingstatistics/approvedresearcherscheme" target="_blank">Office for National Statistics Secure Research Service</a>. More information is available from <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data" target="_blank">https://www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data</a>.</p> <p>Processing within this Purpose 5 is carried out by HESA. Other Controllers (listed under Purpose 1 above) may also process data for this purpose where this is necessary to fulfil their public functions.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 5</strong></p> <p>Processing of your HESA information for Purpose 5 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)).</p> <p>Processing may also be necessary for the purposes of the legitimate interests of HESA in disseminating higher education information, or the legitimate interests of third parties in undertaking research in the field of higher education (See GDPR Article 6(1)(f)).</p> <p>In either case processing of your HESA information is necessary for statistical and research purposes in accordance with GDPR Article 89(1).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 6 - Students on Primary Medical Qualification courses only</strong></p> <p>If you are a student studying for a Primary Medical Qualification (PMQ) HESA will collect additional data about you at the request of the General Medical Council (GMC), who will use it for the purposes set out below. HESA will initially be undertaking this collection as processor. Should HESA become a Controller of this data, HESA may also use this data for purposes 2 to 5 and 8.</p> </div> <p>The GMC is a body with statutory responsibilities for the education, training, and regulation of medical practitioners in the UK. These responsibilities are set out in the Medical Act 1983. More information about how the GMC uses personal data can be found here <a href="http://web.archive.org/web/20230201065042/https://www.gmc-uk.org/privacy-and-cookies" target="_blank">https://www.gmc-uk.org/privacy-and-cookies</a>.</p> <p>The GMC will use data for the purposes of:</p> <ul> <li>Promoting, maintaining and improving high standards of medical education and training in the UK.</li> <li>Undertaking research that will allow the GMC to co-ordinate policy across all stages of medical education, including selection to medical school, undergraduate education, postgraduate education, and medical practice. This research is only possible with high quality measures of school performance. More information about how GMC use your data in research projects can be found here: <a href="http://web.archive.org/web/20230201065042/http://www.ukmed.ac.uk/faq#for_medical_students" target="_blank">www.ukmed.ac.uk/faq#for_medical_students</a>.</li> <li>The GMC will not use the data collected by HESA to make decisions about individual students or doctors.</li> </ul> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 6</strong></p> <p>Legal basis for processing your information for Purpose 6 – these cover use of personal data by both HESA and GMC as data Controllers:</p> <p>Processing of your HESA information for Purpose 6 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (see GDPR Article 6(1)(e)) and for statistical and research purposes (see GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 7 - Students whose information is returned to HESA on a voluntary basis</strong></p> <p>If you are a student studying at a higher educaton provider which has elected to return your data on a voluntary basis HESA will use this data for purposes 2 to 5 and 8. If this purpose applies in relation to your higher education provider, your provider should inform you of this.</p> </div> <p>Sometimes an HE provider’s circumstances change so that it isn’t compulsory for it to submit student data to HESA. In this case, the HE provider and HESA (following consultation with relevant Statutory Customers) might agree to continue to allow the return of data by the provider for their students where this is considered to be in the public interest. Should the status of the provider change so that it becomes compulsory to submit student data to HESA, this will be collected under Purpose 1.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 7</strong></p> <p>Legal basis for processing your information for Purpose 7 – these cover use of personal data by both HESA and the organisations who receive the data under Purpose 2:</p> <p>Processing of your HESA information for Purpose 7 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (see GDPR Article 6(1)(e)) and for statistical and research purposes (see GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 8 - Use by HESA to perform its role as designated data body for England and its equivalent roles for the other countries of the United Kingdom</strong></p> <p>Your HESA information is processed by HESA to collect, compile, publish and share data in accordance with this notice. This processing will include processing for purposes such as analysis & research to: review and improve data quality; data accuracy; and the usefulness; context & richness of the data/analysis HESA produces. It will also be processed to analyse and research the outcomes from education.</p> </div> <p>HESA processes your HESA information as part of a larger statistical dataset for the above purposes to:</p> <ul> <li>Create derived fields to enrich data utility and insights of HESA data.</li> <li>Contextualise the use of HESA data.</li> <li>Research and understand progression through higher education. This may include linking to survey responses provided in the future as part of the Graduate Outcomes survey: <a href="http://web.archive.org/web/20230201065042/https://www.graduateoutcomes.ac.uk/" target="_blank">https://www.graduateoutcomes.ac.uk/</a> and to other datasets for example college data.</li> <li>Quality assure data and to remove anomalies and improve data accuracy. This may include processing personal data in the context of providing bespoke training to higher education providers to provide analysis and improve data quality.</li> <li>Research into data quality and the sector’s reliance on time series data.</li> <li>Migrate data to the new Data Futures data model for use in the new HESA Data Platform which will help improve the accuracy of the data that will be collected by HESA. For more information about this work, see: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/innovation/data-futures/beta-phase">https://www.hesa.ac.uk/innovation/data-futures/beta-phase</a>.</li> <li>Check it against <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/ucas-data">information submitted to UCAS</a> to improve data accuracy. For more information see <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/ucas-data">https://www.hesa.ac.uk/about/regulation/data-protection/ucas-data</a>.</li> <li>To review how changes and improvements can be made to HESA’s processing including systems and software and the implications that this would have on the data it produces.</li> </ul> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 8</strong></p> <p>Processing of your HESA information for Purpose 8 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Linking of your HESA information to other information</strong></p> <p>HESA information is sometimes linked to other data sources to enable more detailed research and analysis.</p> </div> <p>As indicated above, where HESA and organisations covered by Purposes 1 & 2 use HESA information this may include linking named or pseudonymised HESA information to other information for research purposes. Examples include linking to:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.thestudentsurvey.com/privacy-policy/" target="_blank">National Student Survey data</a> – to place the results of this survey in context.</li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data" target="_blank">School and Further Education data</a> – to research progression to higher education.</li> <li><a href="http://web.archive.org/web/20230201065042/https://media.slc.co.uk/alldomiciles/nysf/dps_privacy_notice_e_o.pdf" target="_blank">Student Loans Company data</a> – to research the use of student finance.</li> <li>Qualification awarding bodies data – to research the value and outcomes of qualifications.<br/> Employment, tax, and benefits data – to research the earnings of graduates and to better understand the outcomes of education (Guidance on the use of HESA records matched to tax, benefits and employment data is available at: <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data" target="_blank">www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we- use-and-share-data</a>).</li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ucas.com/about-us/policies/privacy-policies-and-declarations/ucas-privacy-policy" target="_blank">UCAS</a> data – to understand entry rates to higher education.</li> <li>UCAS and Higher Education Career Services Unit (HECSU) data – to deliver an information service to support students and prospective students make informed and effective study and career choices.</li> </ul> <p><strong>Medical students</strong> - If you are a medical student your HESA information may be included in the UKMED research database (<a href="http://web.archive.org/web/20230201065042/http://www.ukmed.ac.uk/" target="_blank">www.ukmed.ac.uk</a>). The General Medical Council is the Controller for this database used for researching  doctors’ progression through their education and training.</p> <p><strong>Widening Participation Programmes</strong> - If you have participated in programmes designed to widen participation in higher education, your HESA information may be linked to data held by these programmes for research purposes. This may include <a href="http://web.archive.org/web/20230201065042/https://heat.ac.uk/" target="_blank">Higher Education Access Tracker (HEAT)</a> and the <a href="http://web.archive.org/web/20230201065042/http://www.emwprep.ac.uk/wp-content/uploads/2018/05/EMWPREP-Team-Structure-and-Key-Roles.pdf" target="_blank">East Midlands Widening Participation Research and Evaluation Partnership (EMWPREP)</a>.</p> <p><strong>Destinations information for schools and colleges</strong> – If you attended a school or college in England or Wales linked data may be disclosed by organisations covered by Purposes 1 & 2 to the last school or college you attended (or its successor body) and to Ofsted or Estyn in the exercise of their official authority to enable them to assess the outcomes of secondary education.</p> <p>Where HESA provides information from your HESA information to third parties under Purpose 5, the permitted processing of the information by a third party may include linking HESA information to other information held by the third party. Permission is considered on a case-by-case basis. It is only given where the linking is for the purposes outlined in Purpose 5 and subject to the requirement not to carry out linking to identify individuals.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>The HESA Initial Teacher Training record (“ITT”)</strong></p> <p>Information about teacher training students in England is submitted to the Department for Education (DfE) and the Teaching Regulation Agency (TRA) via HESA.</p> </div> <p>If you are on an ITT course at a higher education provider in England, HESA will collect additional information about you and provide this to the <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data" target="_blank">DfE</a> and <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/teaching-regulation-agency/about/personal-information-charter" target="_blank">TRA</a>. ITT courses are those that lead to Qualified Teacher Status (QTS) or Early Years Teacher Status (EYTS).</p> <p>The TRA is an executive agency of the Department for Education (DfE) and for the purposes of the GDPR, DfE and HESA are separate Controllers of the ITT record.</p> <p>DfE will process your personal data in exercise of its official authority, namely the funding, administration and monitoring of ITT schemes in England. DfE will use your data to establish a record on the Database of Trainee Teachers and Providers (DTTP) and register your course details and subsequent completion.</p> <p>TRA will process your personal data in the exercise of its official authority, namely the award of QTS and EYTS and the maintenance of the list of teachers in England. TRA will use your data to establish a record on the database of teachers and allocate to you a teacher reference number (TRN). TRA will contact you to provide confirmation of your TRN and any subsequent award of QTS and as part of your statutory induction year.</p> <p>DfE and TRA may share personal data with your provider, and where the law allows it or there is a legal requirement for sharing to take place, its partners and contractors for this purpose and may link it to other sources of information about you. Partners include employers of teachers, teacher employment agencies, Ofsted, Capita Teachers’ Pensions and other executive agencies of the DfE.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Student and leaver surveys</strong></p> <p>You may be asked to provide information about your experience as a student and your activities after you graduate as part of national surveys.</p> </div> <p>Your contact details may be passed to survey contractors to carry out the <a href="http://web.archive.org/web/20230201065042/https://www.thestudentsurvey.com/privacy-policy/" target="_blank">National Student Survey (NSS)</a>, other surveys of students’ views about their study, and surveys of student finances, on behalf of some of the organisations listed under Purposes 1 & 2 above.</p> <p>After you graduate you may be contacted and asked to complete one or more surveys into the outcomes of higher education and your activities after graduation. These surveys are used to create statistics to meet the public interest in the outcomes of higher education. Information from third parties (such as your parent, or your provider if you’re in further study) might be used to complete sections of the surveys if you can’t be contacted. The surveys may be undertaken by your provider or by an organisation contracted for that purpose.</p> <p>Your provider will hold your contact details after you graduate in order for you to be contacted to complete the Graduate Outcomes survey. Your contact details will be passed to HESA and the organisation(s) contracted by HESA to assist it to undertake the <a href="http://web.archive.org/web/20230201065042/https://www.graduateoutcomes.ac.uk/student-q">Graduate Outcomes survey</a>. HESA’s contractors will only use your contact details for the survey and will delete them when the survey is closed. HESA may hold your contact details for further Graduate Outcomes surveys where these are in the public interest. Your responses to the Graduate Outcomes survey will be made available to your provider, and your provider may choose to add additional questions to the survey for their own use.</p> <p>Further privacy and data protection information will be provided if you are contacted for any of these surveys. The privacy information for Graduate Outcomes is available on the <a href="http://web.archive.org/web/20230201065042/https://www.graduateoutcomes.ac.uk/privacy-info" target="_blank">Graduate Outcomes website</a>. You might also be contacted as part of an audit to check that a survey has been undertaken properly.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information to conduct national surveys</strong></p> <p>Processing of your information to conduct the student and graduate surveys is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Further information about recipients of your HESA information</strong></p> </div> <p>HESA publishes a register containing information relating to the recipients to whom we disclose data for statistical purposes. The live register can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/register">https://www.hesa.ac.uk/about/regulation/data-protection/register</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Your rights</strong></p> <p>Data protection legislation gives you rights over your personal data. These include rights to know what information is processed about you and how it is processed. These rights have to be met by HESA and any other organisation which takes decisions about how or why your information is processed.</p> </div> <p>You have the right to be informed about how your personal data is used. This Student collection notice is regularly reviewed to ensure that it accurately describes how your HESA information is used. This notice may be updated from time to time, for example when new legislation is enacted, or when new policies are implemented by the public authorities listed under Purposes 1 & 2. The most up to date version can always be found at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>For further information about data protection, including contact details for HESA’s Data Protection Officer please see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a>. If you have questions about how your HESA information is used, please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#a1c5c0d5c08fd1d3ced5c4c2d5c8cecfe1c9c4d2c08fc0c28fd4ca"><span class="__cf_email__" data-cfemail="8aeeebfeeba4faf8e5feefe9fee3e5e4cae2eff9eba4ebe9a4ffe1">[email protected]</span></a>.</p> <p>Under the GDPR you have the right of access to your personal information and the right to rectify inaccurate information; the right to erasure; restrict processing; and object to processing. These rights are limited in certain circumstances by exemptions contained in the GDPR and the Data Protection Act 2018, where data is only processed for research or statistical purposes. If you think there is a problem with the way HESA is handling your data, you have the right to complain to the Information Commissioner's Office: <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/" target="_blank">ico.org.uk/</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Data transfers to other countries</strong></p> <p>Your HESA information may be transferred to countries outside the UK and the European Union for the purposes described above.</p> </div> <p>Your HESA information will only be transferred to countries whose data protection laws have been assessed as adequate, or where adequate safeguards, are in place to protect your HESA information.</p> </div> </div> <div class="accordion-item"><a aria-controls="Student2020" aria-expanded="false" class="accordion-toggle" href="#Student2020" name="Student2020" role="button">15 July 2020 to 8 July 2021</a></p> <div class="accordion-content" id="Student2020"> <h2><a id="student" name="student"><strong>Student collection notice 2020-2021</strong></a></h2> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2020-21.pdf">HESA_Student_Collection_Notice_2020-21.pdf</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Hysbysiad_Casglu_i_Fyfyrwyr_HESA_2020-21.pdf">Hysbysiad_Casglu_i_Fyfyrwyr_HESA_2020-21.pdf</a></p> <p>The Higher Education Statistics Agency Limited (HESA) is the body responsible for collecting and disseminating information about higher education in the UK and the Designated Data Body for England (see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/about">www.hesa.ac.uk/about</a> for more information). HESA is a Controller of your information.</p> <p>Reference to "your provider" refers to the Higher Education Provider which you attend. This notice relates to information about you which will be collected by your provider and passed to HESA and to other organisations as described below.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Review and Updates to this Notice</strong></p> </div> <p>This notice sets out information about HESA and other Controllers of your data, how and why they process your data, the legal bases for this processing, and your rights under data protection legislation. This notice is regularly reviewed and updated, for example when organisations change their name, or to clarify how your information is used. Updates may be made at any time and you will always find the most up to date version at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Submission of your information to HESA</strong></p> <p>Data about you will be supplied to HESA for the purposes set out below. All information is used in compliance with data protection legislation.</p> </div> <p>Every year your provider will send some of the information it holds about you to HESA (“your HESA information”). HESA is the official source of data about UK universities, higher education colleges, alternative Higher Education Providers, and recognised higher education courses taught at further education institutions in Wales. HESA is a registered charity and operates on a not-for-profit basis.</p> <p>Your HESA information is used for a variety of purposes by HESA and by third parties as described below. HESA may charge other organisations to whom it provides services and data. Uses of your HESA information may include linking parts of it to other information, as described below. Some information provided to HESA is retained indefinitely for statistical research purposes. Your HESA information will not be used to make automated decisions about you. The extent to which your HESA information will be used for purposes 4-5 will vary.</p> <p>All uses of HESA information must comply with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.</p> <p>HESA is developing a new system for collecting student information called the HESA Data Platform. More information about this programme of work can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/innovation/data-futures">www.hesa.ac.uk/innovation/data-futures</a>. If personal data about you is sent to HESA as part of any pilot of the new HESA Data Platform, it will only be used by HESA, your provider, and higher education funding and regulatory bodies to evaluate system functionality and will be deleted at the end of the Data Platform development programme.  As the development of the platform is to enable HESA to have a platform suitable for the public functions of the higher education sector, the lawful bases for this processing can be found in Purpose 1 (below).</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Categories of information submitted to HESA, including special categories of data</strong></p> <p>HESA collects data about the personal characteristics of students and information about their studies and qualifications. This might include sensitive details about students’ personal lives used for equality and diversity monitoring.</p> </div> <p>Data submitted to HESA by your provider includes details about the course you are studying and any qualifications awarded to you during the academic year. It also includes personal details about you such as your name and date of birth, your prior qualifications, and where you lived before and during your course.</p> <p>Information about your disability status, ethnicity, sexual orientation, gender reassignment or religion is classed as ‘Special Categories of data’ under the GDPR. If your provider discloses this information to HESA it will be included in your HESA information. This information is necessary for monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j). This information will also be processed for statistics and statistical research where this is necessary and in the public interest. Your sensitive information will not be used to make decisions about you.</p> <p>Some other information is used to enable research into the provision of fair access to higher education, for example information as to whether you are a care leaver. If your provider is in England your HESA information may include details of any financial support you may receive from your Higher Education Provider.</p> <p>A full list of data items that may be included in your HESA information for the 2020/21 academic year will be available from October 2020 here: <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/collection/c20051/">www.hesa.ac.uk/collection/c20051/</a>. Please note that not all data items are collected for all students.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 1 – Named data used for public functions by the HE funding and regulatory bodies</strong></p> <p>Your HESA information is used by HE funding and regulatory bodies (who request HESA to collect it) for their statutory and/or public functions including funding, regulation and policy-making purposes. Your information is provided by reference to your name, but your information will not be used to make decisions about you.</p> </div> <p>HESA shares your HESA information with the HE funding and regulatory body(s) who request HESA to collect it and require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the funding and regulatory bodies. HESA has been appointed as the designated data body for England under the <a href="http://web.archive.org/web/20230201065042/http://www.legislation.gov.uk/ukpga/2017/29/contents/enacted">Higher Education and Research Act 2017</a>. The HE funding and regulatory bodies are:</p> <ul> <li>England - <a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/privacy/">Office for Students</a> <a name="_Hlk13667188">(who take into account what would be helpful to collect for sharing with </a>UK Research and Innovation and the Secretary of State)</li> <li>Wales - <a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx">Higher Education Funding Council for Wales</a></li> <li>Scotland - <a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/about-sfc/how-we-operate/access-information/privacy-notice/privacy.aspx">Scottish Funding Council</a></li> <li>Northern Ireland - <a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice">Department for the Economy</a></li> </ul> <p>Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who have followed higher education courses in the UK. These organisations are also Controllers of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice. However, all uses of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA.</p> <p>These organisations will not use the data for the purposes of identifying you as an individual or to take decisions about you. These organisations may retain HESA information indefinitely for statistical and research purposes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 1</strong></p> <p>Legal basis for processing your information for Purpose 1 – these cover use of personal data by both HESA and the HE funding and regulatory bodies as data Controllers:</p> <p>Processing of your HESA information for Purpose 1 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (see GDPR Article 6(1)(e)) and for statistical and research purposes (see GDPR Article 89).</p> <p>Processing may also be necessary for compliance with a legal obligation to which the Controller may be subject (see GDPR Article 6(1)(c)).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 2 - Named data used for public functions by public authorities</strong></p> <p>HESA acts as an information hub to provide data and statistics on higher education. While the bodies described in Purpose 1 (above) have legal or regulatory power to require information from certain Higher Education Providers, other public authorities also use your HESA information for their statutory and/or public functions including funding, regulation and policy-making purposes.</p> </div> <p><strong>Education statistics and data</strong><br/> HESA also acts as an information hub to provide information on higher education. In England, this is undertaken outside of HESA’s Designated Data Body activities. HESA shares your HESA information with public authorities who require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the public authorities. Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who have followed higher education courses in the UK.</p> <p>These organisations are also Controllers of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice. However, all uses that they make of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA. These organisations will not use the data for the purposes of identifying you as an individual or to take decisions about you, except as described in Purpose 3 below. These organisations may retain HESA information indefinitely for statistical and research purposes, or for fixed terms depending on the terms of their data sharing agreements with HESA. </p> <p>The HE funding and regulatory bodies (in respect of information not collected under their relevant power – for example the Office for Students have power to collect information from providers in England, but also need information from providers in other parts of the UK) are:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/privacy/">Office for Students</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx">Higher Education Funding Council for Wales</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/about-sfc/how-we-operate/access-information/privacy-notice/privacy.aspx">Scottish Funding Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice">Department for the Economy</a></li> </ul> <p>Education departments in England and the devolved administrations:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data">Department for Education</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://beta.gov.wales/higher-education-statistics-agency-hesa-student-data-collection">Welsh Government</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.gov.scot/Topics/Statistics/ScotXed/PrivacyInformation">Scottish Government</a></li> </ul> <p>Other bodies with public functions connected to education:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/department-for-business-energy-and-industrial-strategy/about/personal-information-charter">Department for Business, Energy and Industrial Strategy</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ukri.org/privacy-notice/">UK Research and Innovation</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/teaching-regulation-agency/about/personal-information-charter">Teaching Regulation Agency</a></li> <li>National Health Service bodies and organisations working with them e.g. <a href="http://web.archive.org/web/20230201065042/https://hee.nhs.uk/about/privacy-notice">Health Education England</a> and <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/department-of-health-and-social-care/about/personal-information-charter">Department of Health and Social Care</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gmc-uk.org/privacy-and-cookies">General Medical Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ucas.com/about-us/policies/privacy-policies-and-declarations/ucas-privacy-policy">UCAS</a></li> </ul> <p>and any successor bodies. Further Controllers may be added to the list from time to time – please see the online version of this notice at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p><strong>Other uses of named data</strong></p> <p>Your HESA information may also be used by some organisations who are also Controllers who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education. Such uses may include the following:</p> <ul> <li>Production of statistics in relation to the population of the UK and for statistical research, undertaken by the Office for National Statistics. Further information can be found on the <a href="http://web.archive.org/web/20230201065042/https://www.ons.gov.uk/aboutus/transparencyandgovernance/dataprotection">ONS website</a>.</li> <li>Production of statistics and statistical research undertaken by <a href="http://web.archive.org/web/20230201065042/https://www.nrscotland.gov.uk/Privacy">National Records of Scotland</a> and the <a href="http://web.archive.org/web/20230201065042/https://www.nisra.gov.uk/nisra-privacy-notice">Northern Ireland Statistics and Research Agency</a>.</li> <li>Monitoring of public expenditure by the <a href="http://web.archive.org/web/20230201065042/https://www.nao.org.uk/privacy-policy-and-cookies-statement/">National Audit Office</a>.</li> </ul> <p>The above list of organisations who may receive your HESA information will be subject to change over time. For example, HESA is seeking to reduce the burden on Higher Education Providers by encouraging other organisations who currently collect information about students direct from Higher Education Providers to collect and receive information through HESA. The above list will be updated on the HESA website at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a> from time to time, and you will need to monitor this link yourself if you wish to be aware of changes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 2</strong></p> <p>Processing of your HESA information for Purpose 2 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 3 - Administrative uses</strong></p> <p>Your named data may be processed by HESA for administrative purposes or by public authorities for the detection or prosecution of fraud. The uses of your HESA information by public authorities may result in decisions being made about you.</p> </div> <p><strong>HESA Administrative Uses</strong></p> <p><strong>HUSID look-up service</strong> - If you have been included in the Student record in previous years, your current Higher Education Provider may use HESA’s look-up service to validate your student identifier (referred to as your HUSID). More information on HESA’s look-up service can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/support/tools-and-downloads/husid">https://www.hesa.ac.uk/support/tools-and-downloads/husid</a>.</p> <p><strong>If you change provider during your Higher Education studies</strong> - If during your study with a Higher Education Provider, you transfer to another Higher Education Provider or your course is delivered in collaboration with another Higher Education Provider, it may be necessary for HESA to share information about you with your new provider to ensure you are correctly included in their relevant data submission to HESA.</p> <p><strong>External Administrative Uses</strong></p> <p>In the exercise of their official authority it may be necessary for the UK higher education funding and regulatory bodies listed in Purposes 1 and 2 to use your HESA information which is passed to them for Purposes 1 and 2 to identify you and take decisions about you as an individual for the following purposes only:</p> <p><strong>Fraud detection and prevention</strong> - Your HESA information may be used to audit claims to public funding and student finance, and to detect and prevent fraud. This may include sharing your information with other Controllers (for example the Student Loans Company, Pearson Education).</p> <p><strong>Previous study - </strong>If your Higher Education Provider is in England: The Office for Students may share your previous education records with this provider, including HESA information submitted by other Higher Education Provider, to determine the nature of any prior higher education study, including your current qualifications. This may be used to make decisions about the fees you are required to pay, the support available to you or the availability of a place for you to study with a Higher Education Provider.</p> <p>For these purposes your HESA information may be held separately (in addition to being held within datasets for Purpose 1) and retained for as long as necessary for the purposes of detection or prosecution of fraud and any associated legal or audit purposes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 3</strong><br/> Processing of your HESA information for Purpose 3 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 4 - HESA publications</strong></p> <p>HESA publishes statistics about students in higher education.</p> </div> <p>Part of HESA’s role is to produce and publish information about higher education in the public interest. This includes some National Statistics publications (<a href="http://web.archive.org/web/20230201065042/https://uksa.statisticsauthority.gov.uk/about-the-authority/uk-statistical-system/types-of-official-statistics/">https://uksa.statisticsauthority.gov.uk/about-the-authority/uk-statistical-system/types-of-official-statistics/</a>) and online business intelligence and research services.</p> <p>When producing this material for publication, HESA applies its disclosure control, the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA Standard Rounding Methodology</a>, to ensure that no Personal Data is included and that individuals cannot be identified from published material.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 4</strong></p> <p>Processing of your HESA information for Purpose 4 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 5 - Equal opportunity, research, journalism and other processing for statistical and research purposes</strong></p> <p>HESA information is used for research into higher education and the student population. This research can be academic, commercial, journalistic or for personal reasons. HESA prohibits the identification of individual students by those carrying out this research and information is not shared on a named basis.</p> </div> <p>HESA and the other Controllers (see Purposes 1 & 2) may also supply information to third parties where there is a legitimate interest in doing so for statistical and research purposes. Examples of use for this purpose include:</p> <ul> <li>Provision of information to students and prospective students</li> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Benchmarking database, known as Heidi Plus</li> </ul> <p>Users to whom information may be supplied for Purpose 5 include:</p> <ul> <li>Higher education sector bodies</li> <li>Higher Education Providers</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties within Purpose 5 is supplied under contracts which require that individuals shall not be identified from the supplied information and this means that they also cannot use it to take decisions about you.</p> <p>A copy of HESA’s current agreement for the supply of tailored information is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">www.hesa.ac.uk/services/custom/data/timescales-costs</a>. Each agreement specifies the duration for which data may be processed. This is usually one year but may be longer, if necessary, for the specific research purpose. Each request for HESA information under Purpose 5 is assessed for its compliance with data protection legislation and its compatibility with this Collection Notice. HESA ensures that only the minimum amount of HESA information necessary for the specified research purpose is supplied to users. If the supplied information is to be published <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA's Rounding Methodology</a> or an equivalent disclosure control must be applied to ensure that individuals cannot be identified from the published material and it does not constitute Personal Data.</p> <p>A copy of HESA’s current agreement for access to Heidi Plus is <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Organisational Agreement for Access to Heidi Plus.pdf">available here</a>. Each agreement specifies the purpose for which the data may be processed.</p> <p>If you are a student at a provider in England, HESA information may be linked to school and/or further education college information and supplied to researchers either through direct supply to the researcher’s organisation or through the <a href="http://web.archive.org/web/20230201065042/https://www.ons.gov.uk/aboutus/whatwedo/statistics/requestingstatistics/approvedresearcherscheme">Office for National Statistics Secure Research Service</a>. This onward sharing to researchers is provided by the <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data">DfE Data Sharing Service</a>. Copies of the ‘Agreement for the Supply of Linked Data’ and of the ‘Agreement for Making Linked Data available in ONS SRS’ can be requested from <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#6a0e0b1e0b4419020b1803040d2a0f0e1f090b1e030504440d051c441f01"><span class="__cf_email__" data-cfemail="573336233679243f36253e3930173233223436233e38397930382179223c">[email protected]</span></a>.</p> <p>Processing within this Purpose 5 is carried out by HESA. Other Controllers (listed under Purpose 1 above) may also process data for this purpose where this is necessary to fulfil their public functions.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 5</strong></p> <p>Processing of your HESA information for Purpose 5 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)).</p> <p>Processing may also be necessary for the purposes of the legitimate interests of HESA in disseminating higher education information, or the legitimate interests of third parties in undertaking research in the field of higher education (See GDPR Article 6(1)(f)).</p> <p>In either case processing of your HESA information is necessary for statistical and research purposes in accordance with GDPR Article 89(1).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 6 - Students on Primary Medical Qualification courses only</strong></p> <p>If you are a student studying for a Primary Medical Qualification (PMQ) we will collect additional data about you at the request of the General Medical Council (GMC), who will use it for the purposes set out below. HESA will also use this data for purposes 2 to 5.</p> </div> <p>The GMC is a body with statutory responsibilities for the education, training and regulation of medical practitioners in the UK. These responsibilities are set out in the Medical Act 1983. More information about how the GMC uses personal data can be found here <a href="http://web.archive.org/web/20230201065042/https://www.gmc-uk.org/privacy-and-cookies">https://www.gmc-uk.org/privacy-and-cookies</a>.</p> <p>The GMC will use data for the purposes of:</p> <ul> <li>Promoting, maintaining and improving high standards of medical education and training in the UK</li> <li>Undertaking research that will allow the GMC to co-ordinate policy across all stages of medical education, including selection to medical school, undergraduate education, postgraduate education, and medical practice. This research is only possible with high quality measures of within school performance. More information about how we use your data in research projects can be found here: <a href="http://web.archive.org/web/20230201065042/http://www.ukmed.ac.uk/faq#for_medical_students">www.ukmed.ac.uk/faq#for_medical_students</a></li> <li>The GMC will not use the data collected by HESA to make decisions about individual students or doctors.</li> </ul> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 6</strong></p> <p>Legal basis for processing your information for Purpose 6 – these cover use of personal data by both HESA and GMC as data Controllers:</p> <p>Processing of your HESA information for Purpose 6 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (see GDPR Article 6(1)(e)) and for statistical and research purposes (see GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 7 - Students whose information is returned to HESA on a voluntary basis</strong></p> <p>If you are a student studying at a Higher Educaton Provider who has elected to return your data on a voluntary basis, HESA will use this data for purposes 2 to 5. If this purpose applies in relation to your Higher Education Provider, your provider should inform you of this.</p> </div> <p>Sometimes an HE provider’s circumstances change so that it isn’t compulsory to submit student data to HESA. In this case, the HE provider and HESA (following consultation with relevant Statutory Customers) might agree to continue to allow the return of data for the provider’s students where this is considered to be in the public interest. Should the status of the provider change so that it becomes compulsory to submit student data to HESA, this will be processed under Purpose 1.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 7</strong></p> <p>Legal basis for processing your information for Purpose 7 – these cover use of personal data by both HESA and the organisations who receive the data under Purpose 2:</p> <p>Processing of your HESA information for Purpose 7 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (see GDPR Article 6(1)(e)) and for statistical and research purposes (see GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Linking of your HESA information to other information</strong></p> <p>HESA information is sometimes linked to other data sources to enable more detailed research and analysis.</p> </div> <p>As indicated above, where HESA and organisations covered by Purposes 1 & 2 use HESA information this may include linking named or pseudonymised HESA information to other information for research purposes. Examples include linking to:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.thestudentsurvey.com/privacy-policy/">National Student Survey</a> data – to place the results of this survey in context</li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data">School and Further Education</a> data – to research progression to higher education</li> <li><a href="http://web.archive.org/web/20230201065042/https://media.slc.co.uk/alldomiciles/nysf/dps_privacy_notice_e_o.pdf">Student Loans Company</a> data – to research the use of student finance</li> <li>Qualification awarding bodies data – to research the value and outcomes of qualifications</li> <li>Employment, tax, and benefits data – to research the earnings of graduates and to better understand the outcomes of education (Guidance on the use of HESA records matched to tax, benefits and employment data is available at: <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data">www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data</a>)</li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ucas.com/about-us/policies/privacy-policies-and-declarations/ucas-privacy-policy">UCAS</a> data – to understand entry rates to higher education</li> <li>If you are a medical student your HESA information may be included in the UKMED research database (<a href="http://web.archive.org/web/20230201065042/http://www.ukmed.ac.uk/">www.ukmed.ac.uk</a>). The General Medical Council is the Controller for this database used for researching doctors’ progression through their education and training.</li> <li>UCAS and Higher Education Career Services Unit (HECSU) data – to deliver an information service to support students and prospective students make informed and effective study and career choices.</li> <li><a href="http://web.archive.org/web/20230201065042/https://heat.ac.uk/">Higher Education Access Tracker (HEAT)</a></li> </ul> <p>Where HESA provides information from your HESA information to third parties under Purpose 5, the permitted uses of the information by a third party may include linking HESA information to other information held by the third party. Permission for such use is considered on a case by case basis. It is only given where the linking is for the purposes outlined in Purpose 5 and subject to the requirement not to carry out linking to identify individuals.</p> <p><strong>Destinations information for schools and colleges</strong> – If you attended a school or college in England or Wales linked data may be disclosed to the last school or college you attended (or its successor body) and to Ofsted or Estyn in the exercise of their official authority to enable them to assess the outcomes of secondary education.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>The HESA Initial Teacher Training record (“ITT”)</strong></p> <p>Information about teacher training students in England is submitted to the Department for Education (DfE) and the Teaching Regulation Agency (TRA) via HESA.</p> </div> <p>If you are on an ITT course at a Higher Education Provider in England, HESA will collect additional information about you and provide this to the <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data">DfE</a> and <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/teaching-regulation-agency/about/personal-information-charter">TRA</a>. ITT courses are those that lead to Qualified Teacher Status (QTS) or Early Years Teacher Status (EYTS).</p> <p>The TRA is an executive agency of the Department for Education (DfE) and, for the purposes of the GDPR, DfE and HESA are separate Controllers of the ITT record.</p> <p>DfE will process your personal data in exercise of its official authority, namely the funding, administration and monitoring of ITT schemes in England. DfE will use your data to establish a record on the Database of Trainee Teachers and Providers (DTTP) and register your course details and subsequent completion.</p> <p>TRA will process your personal data in the exercise of its official authority, namely the award of QTS and EYTS and the maintenance of the list of teachers in England. TRA will use your data to establish a record on the database of teachers and allocate to you a teacher reference number (TRN). TRA will contact you to provide confirmation of your TRN and any subsequent award of QTS and as part of your statutory induction year.</p> <p>DfE and TRA may share personal data with your provider, and where the law allows it or there is a legal requirement for sharing to take place, its partners and contractors for this purpose and may link it to other sources of information about you. Partners include employers of teachers, teacher employment agencies, Ofsted, Capita Teachers’ Pensions and other executive agencies of the DfE.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Student and leaver surveys</strong></p> <p>You may be asked to provide information about your experience as a student and your activities after you graduate as part of national surveys.</p> </div> <p>Your contact details may be passed to survey contractors to carry out the <a href="http://web.archive.org/web/20230201065042/https://www.thestudentsurvey.com/privacy-policy/">National Student Survey</a> (NSS), other surveys of students’ views about their study, and surveys of student finances, on behalf of some of the organisations listed under Purposes 1 & 2 above.</p> <p>After you graduate you may be contacted and asked to complete one or more surveys into the outcomes of higher education and your activities after graduation. These surveys are used to create statistics to meet the public interest in the outcomes of higher education. Information from third parties (such as your parent, or your provider if you’re in further study) might be used to complete sections of the surveys if you can’t be contacted. The surveys may be undertaken by your provider or by an organisation contracted for that purpose.</p> <p>Your provider will hold your contact details after you graduate in order for you to be contacted to complete the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/innovation/outcomes/students">Graduate Outcomes survey</a>. Your contact details will be passed to HESA and the organisation(s) contracted by HESA to assist it to undertake the Graduate Outcomes survey. HESA’s contractors will only use your contact details for the survey and will delete them when the survey is closed. HESA may hold your contact details for further Graduate Outcomes surveys where these are in the public interest. Your responses to the Graduate Outcomes survey will be made available to your provider, and your provider may choose to add additional questions to the survey for their own use.</p> <p>Further privacy and data protection information will be provided if you are contacted for any of these surveys. The privacy information for Graduate Outcomes is available on the <a href="http://web.archive.org/web/20230201065042/https://www.graduateoutcomes.ac.uk/privacy-info">Graduate Outcomes website</a>. You might also be contacted as part of an audit to check that a survey has been undertaken properly.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information to conduct national surveys</strong></p> <p>Processing of your information to conduct the student and graduate surveys is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Further information about recipients of your HESA information</strong></p> </div> <p>HESA publishes a register containing information relating to the recipients to whom we disclose data for statistical purposes. We do not provide names, contact details or unique identifiers to recipients covered by Purpose 5 of this Collection Notice.</p> <p>The live register can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/register">https://www.hesa.ac.uk/about/regulation/data-protection/register</a></p> <p>The data provided may not be personal data as covered by the Data Protection Act 2018 and GDPR, however, we take a conservative view and treat it as personal data as there may be potential for a recipient to be able to identify individuals.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Your rights</strong></p> <p>Data protection legislation gives you rights over your personal data. These include rights to know what information is processed about you and how it is processed. These rights have to be met by HESA and any other organisation which takes decisions about how or why your information is processed.</p> </div> <p>You have the right to be informed about how your personal data is used. This Student Collection Notice is regularly reviewed to ensure that it accurately describes how your HESA information is used. This notice may be updated from time to time, for example when new legislation is enacted, or when new policies are implemented by the public authorities listed under Purposes 1 & 2. The most up to date version can always be found at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>For further information about data protection, including contact details for HESA’s Data Protection Officer please see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a>. If you have questions about how your HESA information is used, please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#5f3b3e2b3e712f2d302b3a3c2b3630311f373a2c3e713e3c712a34"><span class="__cf_email__" data-cfemail="32565346531c42405d465751465b5d5c725a5741531c53511c4759">[email protected]</span></a>.</p> <p>Under the GDPR you have the right of access to your personal information and rights to rectify inaccurate information; restrict processing; and object to processing. These rights are limited in certain circumstances by the GDPR and the Data Protection Act 2018 where data is only processed for research or statistical purposes. If you think there is a problem with the way HESA is handling your data, you have the right to complain to the Information Commissioner's Office: <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/">ico.org.uk/</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Data transfers to other countries</strong></p> <p>Your HESA information may be transferred to countries outside the European Union for the purposes described above.</p> </div> <p>Your HESA information will only be transferred to countries whose data protection laws have been assessed as adequate by the European Commission, or where adequate safeguards, such as the EU-US Privacy Shield, are in place to protect your HESA information. European Commission decisions on the adequacy of the protection of personal data in third countries are published here: <a href="http://web.archive.org/web/20230201065042/http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm">ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm</a>.</p> </div> </div> <div class="accordion-item"><a aria-controls="Student2019" aria-expanded="false" class="accordion-toggle" href="#Student2019" name="Student2019" role="button">16 July 2019 to 14 July 2020</a></p> <div class="accordion-content" id="Student2019"> <h2><a id="student" name="student"><strong>Student collection notice 2019-2020</strong></a></h2> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2019-20%20v1.pdf">HESA_Student_Collection_Notice_2019-20.pdf</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Hysbysiad_Casglu_i_Fyfyrwyr_HESA_2019-20%20v1.pdf">Hysbysiad_Casglu_i_Fyfyrwyr_HESA_2019-20.pdf</a></p> <p>The Higher Education Statistics Agency Limited (HESA) is the body responsible for collecting and disseminating information about higher education in the UK and the Designated Data Body for England (see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/about">www.hesa.ac.uk/about</a> for more information). HESA is a Controller of your information. HESA’s wholly-owned subsidiary company HESA Services Limited acts as a Processor to do work on behalf of HESA and other organisations described in the notice below but may also act as a Controller. </p> <p>Reference to "your provider" refers to the higher education provider which you attend. This notice relates to information about you which will be collected by your provider and passed to HESA and to other organisations as described below.  </p> <p>This notice sets out information about HESA and other controllers of your data, how and why they process your data, the legal bases for this processing, and your rights under data protection legislation. This notice is regularly reviewed and sometimes updated, for example when organisations change their name, or to clarify how your information is used. Updates may be made at any time and you will always find the most up to date version at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Submission of your information to HESA</strong></p> <p>Data about you will be supplied to HESA for the purposes set out below. All information is used in compliance with data protection legislation.</p> </div> <p>Every year your provider will send some of the information it holds about you to HESA (“your HESA information”). HESA is the official source of data about UK universities, higher education colleges, alternative HE providers, and recognised higher education courses taught at further education institutions in Wales. HESA is a registered charity and operates on a not-for-profit basis.</p> <p>Your HESA information is used for a variety of purposes by HESA and by third parties as described below. HESA may charge other organisations to whom it provides services and data. Uses of your HESA information may include linking parts of it to other information, as described below. Some information provided to HESA is retained indefinitely for statistical research purposes. Your HESA information will not be used to make automated decisions about you.  The extent to which your HESA information is used for purposes 4-5 will vary.</p> <p>All uses of HESA information must comply with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.</p> <p>HESA is developing a new system for collecting student information called the HESA Data Platform. More information about this programme of work can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/innovation/data-futures">www.hesa.ac.uk/innovation/data-futures</a>. If personal data about you is sent to HESA as part of any pilot of the new HESA Data Platform, it will only be used by HESA, your provider, and higher education funding and regulatory bodies to evaluate system functionality and will be deleted at the end of the Data Platform development programme.  As the development of the platform is to enable HESA to have a platform suitable for the public functions of the higher education sector, the lawful bases for this processing can be found in Purpose 1 (below).</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Categories of information submitted to HESA, including special categories of data</strong></p> <p>HESA collects data about the personal characteristics of students and information about their studies and qualifications. This might include sensitive details about students’ personal lives used for equality and diversity monitoring.</p> </div> <p>Data submitted to HESA by your provider includes details about the course you are studying and any qualifications awarded to you during the academic year. It also includes personal details about you such as your name and date of birth, your prior qualifications, and where you lived before and during your course.</p> <p>Information about your health, ethnicity, sexual orientation, gender reassignment or religion is classed as ‘Special categories of data’ under the GDPR. If your Provider provides this information to HESA it will be included in your HESA information. This information is necessary for monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j). This information will also be processed for statistics and statistical research where this is necessary and in the public interest.  </p> <p>Some other information is used to enable research into the provision of fair access to higher education, for example information as to whether you are a care leaver. If your provider is in England your HESA information may include details of any financial support you may receive from your higher education provider.</p> <p>A full list of data items that may be included in your HESA information for the 2019/20 academic year can be found here: <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/collection/c19051/">www.hesa.ac.uk/collection/c19051/</a>. Please note that not all data items are collected for all students.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 1 – Named data used for public functions by the HE funding and regulatory bodies</strong></p> <p>Your HESA information is used by HE funding and regulatory bodies (who request HESA to collect it) for their statutory and/or public functions including funding, regulation and policy-making purposes. Your information is provided by reference to your name, but your information will not be used to make decisions about you.</p> </div> <p>HESA shares your HESA information with the HE funding and regulatory body(s) who request HESA to collect it and require it to carry out their statutory and/or public functions.  The data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the funding and regulatory bodies.  HESA has been appointed as the designated data body for England under the <a href="http://web.archive.org/web/20230201065042/http://www.legislation.gov.uk/ukpga/2017/29/contents/enacted">Higher Education and Research Act 2017</a>. The HE funding and regulatory bodies are:</p> <ul> <li>England - <a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/privacy/">Office for Students</a> <a name="_Hlk13667188">(who take into account what would be helpful to collect for sharing with </a><a href="http://web.archive.org/web/20230201065042/https://www.ukri.org/privacy-notice/">UK Research and Innovation</a> and the Secretary of State)</li> <li>Wales - <a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx">Higher Education Funding Council for Wales</a></li> <li>Scotland - <a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/about-sfc/how-we-operate/access-information/privacy-notice/privacy.aspx">Scottish Further and Higher Education Funding Council</a></li> <li>Northern Ireland - <a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice">Department for the Economy</a></li> </ul> <p>Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who have followed higher education courses in the UK.  These organisations are also Controllers of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice. However, all uses of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA.</p> <p>These organisations will not use the data for the purposes of identifying you as an individual or to take decisions about you. These organisations may retain HESA information indefinitely for statistical and research purposes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 1</strong><br/> Legal basis for processing your information for Purpose 1 – these cover use of personal data by both HESA and the HE funding and regulatory bodies data controllers:</p> <p>Processing of your HESA information for Purpose 1 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (see GDPR Article 6(1)(e)) and for statistical and research purposes (see GDPR Article 89).</p> <p>Processing may also be necessary for compliance with a legal obligation to which the controller may be subject (see GDPR Article 6(1)(c)).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 2 - Named data used for public functions by public authorities</strong></p> <p>HESA acts as an information hub to provide data and statistics on higher education. While the bodies described in Purpose 1 (above) have legal or regulatory power to require information from certain HE providers, other public authorities also use your HESA information for their statutory and/or public functions including funding, regulation and policy-making purposes.</p> </div> <p><strong>Education statistics and data</strong><br/> HESA also acts as an information hub to provide information on higher education. In England this is undertaken outside of its Designated Data Body activities. HESA shares your HESA information with public authorities who require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the public authorities. Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who have followed higher education courses in the UK.</p> <p>These organisations are also controllers of your HESA information.  This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice.  However, all uses that they make of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA. These organisations will not use the data for the purposes of identifying you as an individual or to take decisions about you, except as described in Purpose 3 below. These organisations may retain HESA information indefinitely for statistical and research purposes, or for fixed terms depending on the terms of their data sharing agreements with HESA. </p> <p>HE funding and regulatory bodies (in respect of information not collected under their relevant power – for example the Office for Students have power to collect information from English providers, but also need information from providers in other parts of the UK) are:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/privacy/">Office for Students</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx">Higher Education Funding Council for Wales</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/about-sfc/how-we-operate/access-information/privacy-notice/privacy.aspx">Scottish Further and Higher Education Funding Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice">Department for the Economy</a></li> </ul> <p>Education departments in England and the devolved administrations:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data">Department for Education</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://beta.gov.wales/higher-education-statistics-agency-hesa-student-data-collection">Welsh Government</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.gov.scot/Topics/Statistics/ScotXed/PrivacyInformation">Scottish Government</a></li> </ul> <p>Other bodies with public functions connected to education:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/department-for-business-energy-and-industrial-strategy/about/personal-information-charter">Department for Business, Energy and Industrial Strategy</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ukri.org/privacy-notice/">UK Research and Innovation</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/publications/esfa-privacy-notice">Education and Skills Funding Agency</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/teaching-regulation-agency/about/personal-information-charter">Teaching Regulation Agency</a></li> <li>National Health Service bodies and organisations working with them e.g. <a href="http://web.archive.org/web/20230201065042/https://hee.nhs.uk/about/privacy-notice">Health Education England</a> and <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/department-of-health-and-social-care/about/personal-information-charter">Department of Health and Social Care</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gmc-uk.org/privacy-and-cookies">General Medical Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.qaa.ac.uk/privacy-and-cookies">Quality Assurance Agency for Higher Education</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ucas.com/about-us/policies/privacy-policies-and-declarations/ucas-privacy-policy">UCAS</a></li> </ul> <p>and any successor bodies. Further controllers may be added to the list from time to time – please see the online version of this notice at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p><strong>Other uses of named data</strong></p> <p>Your HESA information may also be used by some organisations who are also controllers who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education. Such uses may include the following:</p> <ul> <li>Production of statistics in relation to the population of the UK and for statistical research, undertaken by the Office for National Statistics. Further information can be found on the <a href="http://web.archive.org/web/20230201065042/https://www.ons.gov.uk/aboutus/transparencyandgovernance/onsdatapolicies">ONS website</a>.</li> <li>Production of statistics and statistical research undertaken by <a href="http://web.archive.org/web/20230201065042/https://www.nrscotland.gov.uk/Privacy">National Records of Scotland</a> and the <a href="http://web.archive.org/web/20230201065042/https://www.nisra.gov.uk/nisra-privacy-notice">Northern Ireland Statistics and Research Agency</a>.</li> <li>Monitoring of public expenditure by the <a href="http://web.archive.org/web/20230201065042/https://www.nao.org.uk/privacy-policy-and-cookies-statement/">National Audit Office</a></li> </ul> <p>The above list of organisations who may receive your HESA information will be subject to change over time.  For example, HESA is seeking to reduce the burden on higher education providers by encouraging other organisations who currently collect information about students direct from higher education providers to collect and receive information through HESA. The above list will be updated on the HESA website at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a> from time to time, and you will need to monitor this link yourself if you wish to be aware of changes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 2</strong></p> <p>Processing of your HESA information for Purpose 2 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 3 - Administrative uses</strong></p> <p>Your named data may be processed by public authorities for the detection or prosecution of fraud. These uses of your HESA information may result in decisions being made about you.</p> </div> <p>In the exercise of their official authority it may be necessary for the UK higher education funding and regulatory bodies listed in Purposes 1 and 2 to use your HESA information which is passed to them for Purposes 1 and 2 to identify you and take decisions about you as an individual for the following purposes only:</p> <p><strong>Fraud detection and prevention</strong> - Your HESA information may be used to audit claims to public funding and student finance, and to detect and prevent fraud. This may include sharing your information with other controllers (for example the Student Loans Company, Pearson Education).</p> <p><strong>Previous study - </strong>If your higher education provider is in England: The Office for Students may share your previous education records with this provider, including HESA information submitted by other higher education providers, to determine the nature of any prior higher education study, including your current qualifications. This may be used to make decisions about the fees you are required to pay, the support available to you or the availability of a place for you to study with a higher education provider.</p> <p>For these purposes your HESA information may be held separately (in addition to being held within datasets for Purposes 1) and retained for as long as necessary for the purposes of detection or prosecution of fraud and any associated legal or audit purposes. </p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 3</strong><br/> Processing of your HESA information for Purpose 3 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 4 - HESA publications</strong></p> <p>HESA publishes statistics about students in higher education.</p> </div> <p>Part of HESA’s role is to produce and publish information about higher education in the public interest. This includes some National Statistics publications (<a href="http://web.archive.org/web/20230201065042/http://www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics">www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics</a>) and online business intelligence and research services. </p> <p>When producing this material for publication, HESA applies its disclosure control, the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA Standard Rounding Methodology</a>, to ensure that no Personal Data is included and that individuals cannot be identified from published material.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 4</strong></p> <p>Processing of your HESA information for Purpose 4 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 5 - Equal opportunity, research, journalism and other processing for statistical and research purposes</strong></p> <p>HESA information is used for research into higher education and the student population. This research can be academic, commercial, journalistic or for personal reasons. HESA prohibits the identification of individual students by those carrying out this research and information is not shared on a named basis.</p> </div> <p>HESA and the other controllers (see Purposes 1 & 2) may also supply information to third parties where there is a legitimate interest in doing so for statistical and research purposes. Examples of use for this purpose include:</p> <ul> <li>Provision of information to students and prospective students</li> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> </ul> <p>Users to whom information may be supplied for Purpose 5 include:</p> <ul> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties within Purpose 5 is supplied under contracts which require that individuals shall not be identified from the supplied information and this means that they also cannot use it to take decisions about you. A copy of HESA’s current agreement for the supply of information is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">www.hesa.ac.uk/services/custom/data/timescales-costs</a>. Each agreement specifies the duration for which data may be processed. This is usually one year but may be longer if necessary for the specific research purpose.</p> <p>Each request for HESA information under Purpose 5 is assessed for its compliance with data protection legislation and its compatibility with this Collection Notice. HESA ensures that only the minimum amount of HESA information necessary for the specified research purpose is supplied to users. If the supplied information is to be published <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA's Rounding Methodology</a> or an equivalent disclosure control must be applied to ensure that individuals cannot be identified from the published material and it does not constitute Personal Data.</p> <p>If you are a student at an English registered provider, HESA information may be linked to school and/or further education college information and supplied to researchers either through direct supply to the researcher’s organisation or through the <a href="http://web.archive.org/web/20230201065042/https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ons.gov.uk%2Faboutus%2Fwhatwedo%2Fpaidservices%2Fvirtualmicrodatalaboratoryvml&data=02%7C01%7Cnick.holland%40hesa.ac.uk%7C5bb3e241ebcf4e6e04a808d6adf5b609%7C73146138c2924544bbf3b66a8384786e%7C0%7C1%7C636887668209038241&sdata=jWVDTYBzAsLZtI4Ar3IW3pce2esRTOqf6G0JqtrAmvM%3D&reserved=0">Office for National Statistics Secure Research Service</a>.   This onward sharing to researchers is provided by the <a href="http://web.archive.org/web/20230201065042/https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.gov.uk%2Fguidance%2Fdata-protection-how-we-collect-and-share-research-data&data=02%7C01%7Cnick.holland%40hesa.ac.uk%7C5bb3e241ebcf4e6e04a808d6adf5b609%7C73146138c2924544bbf3b66a8384786e%7C0%7C1%7C636887668209048241&sdata=rkJ%2BVzFOS4pW2o000DWk3CPrKKwBVBTdoUJsSs0I%2FBU%3D&reserved=0">DfE Data Sharing Service</a>.  Copies of the ‘Agreement for the Supply of Linked Data’ and of the ‘Agreement for Making Linked Data available in ONS SRS can be requested from <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#b8dcd9ccd996cbd0d9cad1d6dff8dddccddbd9ccd1d7d696dfd7ce96cdd3"><span class="__cf_email__" data-cfemail="84e0e5f0e5aaf7ece5f6edeae3c4e1e0f1e7e5f0edebeaaae3ebf2aaf1ef">[email protected]</span></a>.</p> <p>Processing within this Purpose 5 is carried out by HESA and HESA Services Limited, HESA's wholly-owned subsidiary company.  Other controllers (listed under Purpose 1 above) may also process data for this purpose where this is necessary to fulfil their public functions.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 5</strong></p> <p>Processing of your HESA information for Purpose 5 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)).</p> <p>Processing may also be necessary for the purposes of the legitimate interests of HESA in disseminating higher education information, or the legitimate interests of third parties in undertaking research in the field of higher education (See GDPR Article 6(1)(f)).</p> <p>In either case processing of your HESA information is necessary for statistical and research purposes in accordance with GDPR Article 89(1).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Linking of your HESA information to other information</strong></p> <p>HESA information is sometimes linked to other data sources to enable more detailed research and analysis.</p> </div> <p>As indicated above, where HESA and organisations covered by Purposes 1 & 2 use HESA information this may include linking named or pseudonymised HESA information to other information for research purposes. Examples include linking to:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.thestudentsurvey.com/privacy-policy/" target="_blank">National Student Survey</a> data – to place the results of this survey in context</li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data">School and Further Education</a> data – to research progression to higher education</li> <li><a href="http://web.archive.org/web/20230201065042/https://www.slc.co.uk/about-us/privacy-notice.aspx">Student Loans Company</a> data – to research the use of student finance</li> <li>Qualification awarding bodies data – to research the value and outcomes of qualifications</li> <li>Employment, tax, and benefits data – to research the earnings of graduates and to better understand the outcomes of education (Guidance on the use of HESA records matched to tax, benefits and employment data is available at: <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data">www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data</a>)</li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ucas.com/about-us/policies/privacy-policies-and-declarations/ucas-privacy-policy">UCAS</a> data – to understand entry rates to higher education</li> <li>If you are a medical student your HESA information may be included in the UKMED research database (<a href="http://web.archive.org/web/20230201065042/http://www.ukmed.ac.uk/">www.ukmed.ac.uk</a>). The General Medical Council is the controller for this database used for researching doctors’ progression through their education and training.</li> <li>UCAS and Higher Education Career Services Unit (HECSU) data – to deliver an information service to support students and prospective students make informed and effective study and career choices.</li> </ul> <p>Where HESA provides information from your HESA information to third parties under Purpose 5, the permitted uses of the information by a third party may include linking HESA information to other information held by the third party.  Permission for such use is considered on a case by case basis.  It is only given where the linking is for the purposes outlined in Purpose 5 and subject to the requirement not to carry out linking to identify individuals.</p> <p><strong>Destinations information for schools and colleges</strong> – If you attended a school or college in England or Wales linked data may be disclosed to the last school or college you attended (or its successor body) and to Ofsted or Estyn in the exercise of their official authority to enable them to assess the outcomes of secondary education.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>The HESA Initial Teacher Training record (“ITT”)</strong></p> <p>Information about teacher training students in England is submitted to the Department for Education (DfE) and the Teaching Regulation Agency (TRA) via HESA.</p> </div> <p>If you are on an ITT course at a higher education provider in England, HESA will collect additional information about you and provide this to the DfE and TRA. ITT courses are those that lead to Qualified Teacher Status (QTS) or Early Years Teacher Status (EYTS).</p> <p>The TRA is an executive agency of the Department for Education (DfE) and, for the purposes of the GDPR, DfE and HESA are separate controllers of the ITT record.</p> <p>DfE will process your personal data in exercise of its official authority, namely the funding, administration and monitoring of ITT schemes in England. DfE will use your data to establish a record on the Database of Trainee Teachers and Providers (DTTP)and register your course details and subsequent completion.</p> <p>TRA will process your personal data in the exercise of its official authority, namely the award of QTS and EYTS and the maintenance of the list of teachers in England. TRA will use your data to establish a record on the database of teachers and allocate to you a teacher reference number (TRN). TRA will contact you to provide confirmation of your TRN and any subsequent award of QTS and as part of your statutory induction year.</p> <p>DfE and TRA may share personal data with your provider, and where the law allows it or there is a legal requirement for sharing to take place, its partners and contractors for this purpose and may link it to other sources of information about you. Partners include employers of teachers, teacher employment agencies, Ofsted, Capita Teachers’ Pensions and other executive agencies of the DfE.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Student and leaver surveys</strong></p> <p>You may be asked to provide information about your experience as a student and your activities after you graduate as part of national surveys.</p> </div> <p>Your contact details may be passed to survey contractors to carry out the <a href="http://web.archive.org/web/20230201065042/https://www.ipsos-mori.com/researchspecialisms/socialresearch/specareas/highereducation/nss.aspx">National Student Survey</a> (NSS), other surveys of students’ views about their study, and surveys of student finances, on behalf of some of the organisations listed under Purposes 1 & 2 above.</p> <p>After you graduate you may be contacted and asked to complete one or more surveys into the outcomes of higher education and your activities after graduation. These surveys are used to create statistics to meet the public interest in the outcomes of higher education. Information from third parties (such as your parent, or your provider if you’re in further study) might be used to complete sections of the surveys if you can’t be contacted. The surveys may be undertaken by your provider or by an organisation contracted for that purpose.</p> <p>Your provider will hold your contact details after you graduate in order for you to be contacted to complete the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/innovation/outcomes/students">Graduate Outcomes survey</a>. Your contact details will be passed to HESA and the organisation(s) contracted by HESA to assist it to undertake the Graduate Outcomes survey. HESA’s contractors will only use your contact details for the survey and will delete them when the survey is closed. HESA may hold your contact details for further graduate outcomes surveys where these are in the public interest. Your responses to the Graduate Outcomes survey will be made available to your provider, and your provider may choose to add additional questions to the survey for their own use.</p> <p>Further privacy and data protection information will be provided if you are contacted for any of these surveys.  The privacy information for Graduate Outcomes is available on the <a href="http://web.archive.org/web/20230201065042/https://www.graduateoutcomes.ac.uk/privacy-info">Graduate Outcomes website</a>. You might also be contacted as part of an audit to check that a survey has been undertaken properly.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information to conduct national surveys</strong></p> <p>Processing of your information to conduct the student and graduate surveys is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Your rights</strong></p> <p>Data protection legislation gives you rights over your personal data. These include rights to know what information is processed about you and how it is processed.  These rights have to be met by HESA and any other organisation which takes decisions about how or why your information is processed.</p> </div> <p>You have the right to be informed about how your personal data is used. This Student Collection Notice is regularly reviewed to ensure that it accurately describes how your HESA information is used.  This notice may be updated from time to time, for example when new legislation is enacted, or when new policies are implemented by the public authorities listed under Purposes 1 & 2. The most up to date version can always be found at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>. </p> <p>For further information about data protection, including contact details for HESA and HESA Services’ Data Protection Officer please see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a><u>.</u> If you have questions about how your HESA information is used, please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#5f3b3e2b3e712f2d302b3a3c2b3630311f373a2c3e713e3c712a34"><span class="__cf_email__" data-cfemail="32565346531c42405d465751465b5d5c725a5741531c53511c4759">[email protected]</span></a>.</p> <p>Under the GDPR you have the right of access to your personal information and rights to rectify inaccurate information; restrict processing; and object to processing. These rights are limited in certain circumstances by the GDPR and the Data Protection Act 2018 where data is only processed for research or statistical purposes. If you think there is a problem with the way HESA is handling your data, you have the right to complain to the Information Commissioner's Office: <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/">ico.org.uk/</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Data transfers to other countries</strong></p> <p>Your HESA information may be transferred to countries outside the European Union for the purposes described above.</p> </div> <p>Your HESA information will only be transferred to countries whose data protection laws have been assessed as adequate by the European Commission, or where adequate safeguards, such as the EU-US Privacy Shield, are in place to protect your HESA information. European Commission decisions on the adequacy of the protection of personal data in third countries are published here: <a href="http://web.archive.org/web/20230201065042/http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm">ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm</a>.</p> </div> </div> <div class="accordion-item"><a aria-controls="Student2018" aria-expanded="false" class="accordion-toggle" href="#Student2018" name="Student2018" role="button">12 July 2018 to 16 July 2019</a></p> <div class="accordion-content" id="Student2018"> <h2><a id="student" name="student"><strong>Student collection notice 2018-2019</strong></a></h2> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2018-19.pdf">HESA_Student_Collection_Notice_2018-19.pdf</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Hysbysiad_Casglu_i_Fyfyrwyr_HESA_2018-19.pdf">Hysbysiad_Casglu_i_Fyfyrwyr_HESA_2018-19.pdf</a></p> <p>The Higher Education Statistics Agency Limited (HESA) is the body responsible for collecting and disseminating information about higher education in the UK and the Designated Data Body for England (<a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/about">www.hesa.ac.uk/about</a>). HESA is a Controller of your information. HESA’s wholly-owned subsidiary company HESA Services Limited acts as a Processor to do work on behalf of HESA and other organisations described in the notice below, but may also act as a Controller.</p> <p>Reference to "your provider" refers to the higher education provider which you attend. This notice relates to information about you which will be collected by your provider and passed to HESA and to other organisations as described below.  </p> <p>This notice sets out information about HESA and other controllers of your data, how and why they process your data, the legal bases for this processing, and your rights under data protection legislation. This notice is regularly reviewed and sometimes updated, for example when organisations change their name, or to clarify how your information is used. Updates may be made at any time and you will always find the most up to date version at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>The boxes below summarise the key information you need to know.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Submission of your information to HESA</strong></p> <p>Data about you will be supplied to HESA for the purposes set out below. All information is used in compliance with data protection legislation.</p> </div> <p>Every year your provider will send some of the information it holds about you to HESA (“your HESA information”). HESA is the official source of data about UK universities, higher education colleges, alternative HE providers, and recognised higher education courses taught at further education institutions in Wales. HESA is a registered charity and operates on a not-for-profit basis.</p> <p>Your HESA information is used for a variety of purposes by HESA and by third parties as described below. HESA may charge other organisations to whom it provides services and data. Uses of your HESA information may include linking parts of it to other information, as described below. Some information provided to HESA is retained indefinitely for statistical research purposes. Your HESA information will not be used to make automated decisions about you.</p> <p>All uses of HESA information must comply with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.</p> <p>HESA is developing a new system for collecting student information called the HESA Data Platform that will go live from the 2019/20 academic year. More information about this programme of work can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/innovation/data-futures">www.hesa.ac.uk/innovation/data-futures</a>. If personal data about you is sent to HESA as part of any pilot of the new HESA Data Platform, it will only be used by HESA, your provider, and higher education funding and regulatory bodies to evaluate system functionality and will be deleted at the end of the Data Platform development programme in 2020.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Categories of information submitted to HESA, including special categories of data</strong></p> <p>HESA collects data about the personal characteristics of students and information about their studies and qualifications. This might include sensitive details about students’ personal lives used for equality and diversity monitoring.</p> </div> <p>Data submitted to HESA by your provider includes details about the course you are studying and any qualifications awarded to you during the academic year. It also includes personal details about you such as your name and date of birth, your prior qualifications, and where you lived before starting your course.</p> <p>Information about your disability status, ethnicity, sexual orientation, gender reassignment or religion is classed as ‘Special categories of data’ under the GDPR. If your Provider provides this information to HESA it will be included in your HESA information. This information is necessary for monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act 2010 <a name="_Hlk514424953">and Section 75 of the Northern Ireland Act 1998</a>. This information will also be processed for statistics and statistical research where this is necessary and in the public interest. Your sensitive information will not be used to make decisions about you.</p> <p>Some other information is used to enable research into the provision of fair access to higher education, for example information as to whether you are a care leaver. If your provider is in England your HESA information may include details of any financial support you may receive from your higher education provider.</p> <p>A full list of data items that may be included in your HESA information for the 2018/19 academic year can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c18051/">www.hesa.ac.uk/collection/c18051/</a>. Please note that not all data items are collected for all students.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 1 – Named data used for public functions</strong></p> <p>Your HESA information is used by public authorities for their statutory and/or public functions including funding, regulation and policy-making purposes. Your information is provided by reference to your name, but your information will not be used to make decisions about you.</p> </div> <p><strong>Education statistics and data</strong><br/> HESA shares your HESA information with public authorities who require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the public authorities.  Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who have followed higher education courses in the UK. </p> <p>These organisations are also controllers of your HESA information.  This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice.  However, all uses that they make of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA. These organisations will not use the data for the purposes of identifying you as an individual or to take decisions about you, except as described in Purpose 2 below. These organisations may retain HESA information indefinitely for statistical and research purposes, or for fixed terms depending on the terms of their data sharing agreements with HESA. </p> <p>Such organisations may include:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data">Department for Education</a></li> <li>Department for Business, Energy and Industrial Strategy</li> <li><a href="http://web.archive.org/web/20230201065042/https://beta.gov.wales/higher-education-statistics-agency-hesa-student-data-collection">Welsh Government</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.gov.scot/Topics/Statistics/ScotXed/PrivacyInformation">Scottish Government</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice">Department for the Economy</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/privacy/">Office for Students</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx">Higher Education Funding Council for Wales</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/home/privacy.aspx">Scottish Further and Higher Education Funding Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ukri.org/privacy-notice/">UK Research and Innovation</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/publications/esfa-privacy-notice">Education and Skills Funding Agency</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/teaching-regulation-agency/about/personal-information-charter">Teaching Regulation Agency</a></li> <li>National Health Service bodies and organisations working with them e.g. <a href="http://web.archive.org/web/20230201065042/https://hee.nhs.uk/about/privacy-notice">Health Education England</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gmc-uk.org/privacy-and-cookies">General Medical Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.qaa.ac.uk/privacy">Quality Assurance Agency for Higher Education</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ucas.com/about-us/policies/privacy-policies-and-declarations/ucas-privacy-policy">UCAS</a></li> </ul> <p>and any successor bodies. Further controllers may be added to the list from time to time – please see the online version of this notice at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p><strong>Other uses of named data</strong></p> <p>Your HESA information may also be used by some organisations who are also controllers who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education. Such uses may include the following:</p> <ul> <li>Production of statistics in relation to the population of the UK and for statistical research, undertaken by the Office for National Statistics. Further information can be found on the <a href="http://web.archive.org/web/20230201065042/https://www.ons.gov.uk/aboutus/transparencyandgovernance/onsdatapolicies">ONS website</a>.</li> <li>Production of statistics and statistical research undertaken by <a href="http://web.archive.org/web/20230201065042/https://www.nrscotland.gov.uk/Privacy">National Records of Scotland</a> and the <a href="http://web.archive.org/web/20230201065042/https://www.nisra.gov.uk/nisra-privacy-notice">Northern Ireland Statistics and Research Agency</a></li> <li>Monitoring of public expenditure by the <a href="http://web.archive.org/web/20230201065042/https://www.nao.org.uk/privacy-policy-and-cookies-statement/">National Audit Office</a></li> </ul> <p>The above list of organisations who may receive your HESA information will be subject to change over time.  For example, HESA is seeking to reduce the burden on higher education providers by encouraging other organisations who currently collect information about students direct from higher education providers to collect and receive information through HESA. The above list will be updated on the HESA website at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a> from time to time, and you will need to monitor this link yourself if you wish to be aware of changes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 1</strong><br/> Processing of your HESA information for Purpose 1 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).<br/> Processing of Special Categories of data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, or the Digital Economy Act 2017 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 2 - Administrative uses</strong></p> <p>Your named data may be processed by public authorities for the detection or prosecution of fraud. These uses of your HESA information may result in decisions being made about you.</p> </div> <p>In the exercise of their official authority it may be necessary for the UK higher education funding and regulatory bodies listed in Purpose 1 to use your HESA information which is passed to them for Purpose 1 to identify you and take decisions about you as an individual for the following purposes only:</p> <p><strong>Fraud detection and prevention</strong> - Your HESA information may be used to audit claims to public funding and student finance, and to detect and prevent fraud. This may include sharing your information with other controllers (for example the Student Loans Company, Pearson Education).</p> <p><strong>Previous study - </strong>If your higher education provider is in England: The Office for Students may share your previous education records with this provider, including HESA information submitted by other higher education providers, to determine the nature of any prior higher education study, including your current qualifications. This may be used to make decisions about the fees you are required to pay, the support available to you or the availability of a place for you to study with a higher education provider.</p> <p>For these purposes your HESA information may be held separately (in addition to being held within datasets for Purpose 1) and retained for as long as necessary for the purposes of detection or prosecution of fraud and any associated legal or audit purposes. </p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 2</strong><br/> Processing of your HESA information for Purpose 2 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 3 - HESA publications</strong></p> <p>HESA publishes statistics about students in higher education.</p> </div> <p>Part of HESA’s role is to produce and publish information about higher education in the public interest. This includes some National Statistics publications (<a href="http://web.archive.org/web/20230201065042/http://www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics">www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics</a>) and online business intelligence and research services.</p> <p>When producing this material for publication, HESA applies its disclosure control, the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA Standard Rounding Methodology</a>, to ensure that no Personal Data is included and that individuals cannot be identified from published material.</p> <p>Processing within this Purpose 3 may also be carried out by HESA Services Limited, HESA's wholly-owned subsidiary company.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 3</strong><br/> Processing of your HESA information for Purpose 3 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).<br/> Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 4 - Equal opportunity, research, journalism and other processing for statistical and research purposes</strong></p> <p>HESA information is used for research into higher education and the student population. This research can be academic, commercial, journalistic or for personal reasons. HESA prohibits the identification of individual students by those carrying out this research and information is not shared on a named basis.</p> </div> <p>HESA and the other controllers (see Purpose 1) may also supply information to third parties where there is a legitimate interest in doing so for statistical and research purposes. Examples of use for this purpose include:</p> <ul> <li>Provision of information to students and prospective students</li> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> </ul> <p>Users to whom information may be supplied for Purpose 4 include:</p> <ul> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties within Purpose 4 is supplied under contracts which require that individuals shall not be identified from the supplied information and this means that they also cannot use it to take decisions about you. A copy of HESA’s current agreement for the supply of information is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">www.hesa.ac.uk/services/custom/data/timescales-costs</a>. Each agreement specifies the duration for which data may be processed. This is usually one year but may be longer if necessary for the specific research purpose. Each request for HESA information under Purpose 4 is assessed for its compliance with data protection legislation and its compatibility with this Collection Notice. HESA ensures that only the minimum amount of HESA information necessary for the specified research purpose is supplied to users. If the supplied information is to be published <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA's Rounding Methodology</a> or an equivalent disclosure control must be applied to ensure that individuals cannot be identified from the published material and it does not constitute Personal Data.</p> <p>HESA student information may be linked to school and/or further education college information and supplied to researchers. A copy of the Agreement for the supply of linked data about pupils from schools in England is available at <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/collections/national-pupil-database">www.gov.uk/government/collections/national-pupil-database</a>.</p> <p>Processing within this Purpose 4 is carried out by HESA, HESA Services Limited, HESA's wholly-owned subsidiary company.  Other controllers (listed under Purpose 1 above) may also process data for this purpose where this is necessary to fulfil their public functions.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 4</strong><br/> Processing of your HESA information for Purpose 4 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)).<br/> Processing may also be necessary for the purposes of the legitimate interests of HESA in disseminating higher education information, or the legitimate interests of third parties in undertaking research in the field of higher education (See GDPR Article 6(1)(f)).<br/> In either case processing of your HESA information is necessary for statistical and research purposes in accordance with GDPR Article 89(1).<br/> Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Linking of your HESA information to other information</strong></p> <p>HESA information is sometimes linked to other data sources to enable more detailed research and analysis.</p> </div> <p>As indicated above, where HESA and organisations covered by Purpose 1 use HESA information this may include linking named or pseudonymised HESA information to other information for research purposes. Examples include linking to:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.thestudentsurvey.com/privacy-statement.php">National Student Survey</a> data – to place the results of this survey in context</li> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data">School and Further Education</a> data – to research progression to higher education</li> <li><a href="http://web.archive.org/web/20230201065042/https://www.slc.co.uk/about-us/privacy-notice.aspx">Student Loans Company</a> data – to research the use of student finance</li> <li>Qualification awarding bodies data – to research the value and outcomes of qualifications</li> <li>Employment, tax, and benefits data – to research the earnings of graduates and to better understand the outcomes of education (Guidance on the use of HESA records matched to tax, benefits and employment data is available at: <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data">www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data</a>)</li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ucas.com/about-us/policies/privacy-policies-and-declarations/ucas-privacy-policy">UCAS</a> data – to understand entry rates to higher education</li> <li>If you are a medical student your HESA information may be included in the UKMED research database (<a href="http://web.archive.org/web/20230201065042/http://www.ukmed.ac.uk/">www.ukmed.ac.uk</a>). The General Medical Council is the controller for this database used for researching doctors’ progression through their education and training.</li> </ul> <p>Where HESA provides information from your HESA information to third parties under Purpose 4, the permitted uses of the information by a third party may include linking HESA information to other information held by the third party.  Permission for such use is considered on a case by case basis.  It is only given where the linking is for the purposes outlined in Purpose 4 and subject to the requirement not to carry out linking to identify individuals.</p> <p><strong>Destinations information for schools and colleges</strong> – If you attended a school or college in England or Wales linked data may be disclosed to the last school or college you attended (or its successor body) and to Ofsted or Estyn in the exercise of their official authority to enable them to assess the outcomes of secondary education.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>The HESA Initial Teacher Training record (“ITT”)</strong></p> <p>Information about teacher training students in England is submitted to the Department for Education (DfE) and the Teaching Regulation Agency (TRA) via HESA.</p> </div> <p>If you are on an ITT course at a higher education provider in England, HESA will collect additional information about you and provide this to the <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data">Department for Education (DfE)</a> and the <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/teaching-regulation-agency/about/personal-information-charter">Teaching Regulation Agency (TRA)</a>. ITT courses are those that lead to Qualified Teacher Status (QTS) or Early Years Teacher Status (EYTS).</p> <p>The TRA is an executive agency of the DfE and, for the purposes of the GDPR, DfE and HESA are separate controllers of the ITT record.</p> <p>DfE will process your personal data in exercise of its official authority, namely the funding, administration and monitoring of ITT schemes in England. DfE will use your data to establish a record on the Initial Teacher Training Data Management System (ITTDMS) and register your course details and subsequent completion.</p> <p>TRA will process your personal data in the exercise of its official authority, namely the award of QTS and EYTS and the maintenance of the list of teachers in England. TRA will use your data to establish a record on the database of teachers and allocate to you a teacher reference number (TRN). TRA will contact you to provide confirmation of your TRN and any subsequent award of QTS.</p> <p>DfE and TRA may share personal data with your provider, and where the law allows it or there is a legal requirement for sharing to take place, its partners and contractors for this purpose and may link it to other sources of information about you. Partners include employers of teachers, teacher employment agencies, Ofsted, Capita Teachers’ Pensions and other executive agencies of the DfE.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Student and leaver surveys</strong></p> <p>You may be asked to provide information about your experience as a student and your activities after you graduate as part of national surveys.</p> </div> <p>Your contact details may be passed to survey contractors to carry out the <a href="http://web.archive.org/web/20230201065042/https://www.ipsos-mori.com/researchspecialisms/socialresearch/specareas/highereducation/nss.aspx">National Student Survey</a> (NSS), other surveys of students’ views about their study, and surveys of student finances, on behalf of some of the organisations listed under Purpose 1 above.</p> <p>After you graduate you may be contacted and asked to complete one or more surveys into the outcomes of higher education and your activities after graduation. These surveys are used to create statistics to meet the public interest in the outcomes of higher education. Information from third parties (such as your parent, or your provider if you’re in further study) might be used to complete sections of the surveys if you can’t be contacted. The surveys may be undertaken by your provider or by an organisation contracted for that purpose.</p> <p>Your provider will hold your contact details after you graduate in order for you to be contacted to complete the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/innovation/outcomes/students">Graduate Outcomes survey</a>. Your contact details will be passed to HESA and the organisation(s) contracted by HESA to assist it to undertake the Graduate Outcomes survey. HESA’s contractors will only use your contact details for the survey and will delete them when the survey is closed. HESA may hold your contact details for further graduate outcomes surveys where these are in the public interest. Your responses to the Graduate Outcomes survey will be made available to your provider, and your provider may choose to add additional questions to the survey for their own use.</p> <p>Further privacy and data protection information will be provided if you are contacted for any of these surveys. You might also be contacted as part of an audit to check that the survey has been undertaken properly.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information to conduct national surveys</strong><br/> Processing of your information to conduct the student and graduate surveys is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Your rights</strong></p> <p>Data protection legislation gives you rights over your personal data. These include rights to know what information is processed about you and how it is processed. These rights have to be met by HESA and any other organisation which takes decisions about how or why your information is processed.</p> </div> <p>You have the right to be informed about how your personal data is used. This Student Collection Notice is regularly reviewed to ensure that it accurately describes how your HESA information is used.  This notice may be updated from time to time, for example when new legislation is enacted, or when new policies are implemented by the public authorities listed under Purpose 1. The most up to date version can always be found at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>For further information about data protection, including contact details for HESA and HESA Services’ Data Protection Officer please see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a><u>.</u> If you have questions about how your HESA information is used, please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#e581849184cb95978a918086918c8a8ba58d809684cb8486cb908e"><span class="__cf_email__" data-cfemail="c2a6a3b6a3ecb2b0adb6a7a1b6abadac82aaa7b1a3eca3a1ecb7a9">[email protected]</span></a>.</p> <p>Under the GDPR you have the right of access to your personal information and rights to rectify inaccurate information; restrict processing; and object to processing. These rights are limited in certain circumstances by the GDPR and the Data Protection Act 2018 where data is only processed for research or statistical purposes. If you think there is a problem with the way HESA is handling your data, you have the right to complain to the Information Commissioner's Office: <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/">ico.org.uk/</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Data transfers to other countries</strong></p> <p>Your HESA information may be transferred to countries outside the European Union for the purposes described above.</p> </div> <p>Your HESA information will only be transferred to countries whose data protection laws have been assessed as adequate by the European Commission, or where adequate safeguards, such as the EU-US Privacy Shield, are in place to protect your HESA information. European Commission decisions on the adequacy of the protection of personal data in third countries are published here: <a href="http://web.archive.org/web/20230201065042/http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm">ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm</a>.</p> </div> </div> <div class="accordion-item"><a aria-controls="Student2017" aria-expanded="false" class="accordion-toggle" href="#Student2017" name="Student2017" role="button">26 June 2017 to 12 July 2018</a></p> <div class="accordion-content" id="Student2017"> <h2><a id="student" name="student"><strong>Student collection notice 2017-2018</strong></a></h2> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2017-18_updated_20180417.pdf">HESA_Student_Collection_Notice_2017-18_updated_20180417.pdf</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Hysbysiad_Casglu_i_Fyfyrwyr_HESA_2017-18.pdf">Hysbysiad_Casglu_i_Fyfyrwyr_HESA_2017-18.pdf</a></p> <p><strong>Note: </strong>Reference in this notice to “we” and “us” refers to the Higher Education Statistics Agency Limited (<a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/about">www.hesa.ac.uk/about</a>) and its wholly-owned subsidiary company HESA Services Limited. HESA is the official body responsible for collecting and disseminating information about higher education in the UK. Both HESA and HESA Services Ltd process personal data as ‘Data Controllers’. HESA Services Ltd also acts as a ‘Data Processor’ to do work on behalf of HESA and other organisations described in the notice below.</p> <p>Reference to "your provider" refers to the higher education provider which you attend. This notice relates to information about you which will be collected by your provider and passed to HESA and to other organisations as described below.</p> <p>This notice is regularly reviewed and sometimes updated, for example when organisations change their name, or to clarify how your information is used. Updates may be made at any time and you will always find the most up to date version at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>. The information below was updated on 17 April 2018 to update the names of organisations listed in Purpose 1 and referred to in the ITT section.</p> <p>The boxes below summarise the key information you need to know.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Submission of your information to HESA</strong></p> <p>Data about you will be supplied to HESA for the purposes set out below. All information is used in compliance with the Data Protection Act 1998, and from 25 May 2018 with the General Data Protection Regulation (GDPR).</p> </div> <p>Every year your provider will send some of the information it holds about you to HESA (“your HESA information”). HESA is the official source of data about UK universities, higher education colleges, alternative HE providers, and recognised higher education courses taught at further education institutions in Wales. HESA is a registered charity and operates on a not-for-profit basis.</p> <p>Your HESA information is used for a variety of purposes by HESA and by third parties as described below. HESA may charge other organisations to whom it provides services and data. Uses of your HESA information may include linking parts of it to other information, as described below. Information provided to HESA is retained indefinitely for statistical research purposes. Your HESA information will not be used to make automated decisions about you.</p> <p>All uses of HESA information must comply with the Data Protection Act 1998 (DPA): <a href="http://web.archive.org/web/20230201065042/http://www.legislation.gov.uk/ukpga/1998/29/contents">www.legislation.gov.uk/ukpga/1998/29/contents</a>. From 25 May 2018, the DPA will be replaced by the EU General Data Protection Regulation (GDPR): <a href="http://web.archive.org/web/20230201065042/http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN">eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN</a>. All uses of HESA information will comply with the GDPR from that date onwards.</p> <p>HESA is developing a new system for collecting student information called the HESA Data Platform that will go live from the 2019/20 academic year. More information about this programme of work can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/innovation/data-futures">www.hesa.ac.uk/innovation/data-futures</a>. If personal data about you is sent to HESA as part of any pilot of the new HESA Data Platform, it will only be used by HESA, your provider, and higher education funding and regulatory bodies to evaluate system functionality and will be deleted at the end of the Data Platform development programme in 2020.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Categories of information submitted to HESA, including special categories of data</strong></p> <p>HESA collects data about the personal characteristics of students and information about their studies and qualifications. This might include sensitive details about students’ personal lives used for equality and diversity monitoring.</p> </div> <p>Data submitted to us by your provider includes details about the course you are studying and any qualifications awarded to you during the academic year. It also includes personal details about you such as your name and date of birth, your prior qualifications, and where you lived before starting your course.</p> <p>Information about your disability status, ethnicity, sexual orientation, gender reassignment or religion is classed as ‘Sensitive personal data’ under the DPA, and ‘Special categories of data’ under the GDPR. If your Provider provides this information to us it will be included in your HESA information. This information is necessary for monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act 2010. Your sensitive information will be used for research purposes and will not be used to make decisions about you.</p> <p>Some other information is used to enable research into the provision of fair access to higher education, for example information as to whether you are a care leaver. If your provider is in England your HESA information may include details of any financial support you may receive from your higher education provider.</p> <p>A full list of data items that may be included in your HESA information for the 2017/18 academic year can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c17051/">www.hesa.ac.uk/collection/c17051/</a>. Please note that not all data items are collected for all students.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 1 – Named data used for public functions</strong></p> <p>Your HESA information is used by public authorities for their statutory and/or public functions including funding, regulation and policy-making purposes. Your information is provided by reference to your name, but your information will not be used to make decisions about you.</p> </div> <p><strong>Education statistics and data</strong><br/> HESA shares your HESA information with public authorities who require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the public authorities. Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who have followed higher education courses in the UK.</p> <p>These organisations are data controllers in common of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice. However, all uses that they make of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA. These organisations will not use the data for the purposes of identifying you as an individual or to take decisions about you, except as described in Purpose 2 below. These organisations may retain HESA information indefinitely for statistical and research purposes, or for fixed terms depending on the terms of their data sharing agreements with HESA.</p> <p>Such organisations may include:</p> <ul> <li>Department for Education</li> <li>Department for Business, Energy and Industrial Strategy</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for the Economy, Northern Ireland</li> <li>Office for Students</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>UK Research and Innovation</li> <li>Education and Skills Funding Agency</li> <li>Teaching Regulation Agency</li> <li>National Health Service bodies and organisations working with them e.g. Health Education England</li> <li>General Medical Council</li> <li>Quality Assurance Agency for Higher Education</li> <li>UCAS</li> </ul> <p>and any successor bodies. Further data controllers may be added to the list from time to time – please see the online version of this notice at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn.</a></p> <p><strong>Other uses of named data</strong><br/> Your HESA information may also be used by some organisations who are also data controllers in common who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education. Such uses may include the following:</p> <ul> <li>Measurement of population levels and migration by the Office for National Statistics, National Records of Scotland and the Northern Ireland Statistics and Research Agency</li> <li>Monitoring of public expenditure by the National Audit Office</li> <li>Monitoring of the accuracy of electoral registers by Electoral Registration Officials</li> </ul> <p>The above list of organisations who may receive your HESA information will be subject to change over time. For example, HESA is seeking to reduce the burden on higher education providers by encouraging other organisations who currently collect information about students direct from higher education providers to collect and receive information through HESA. The above list will be updated on the HESA website at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a> from time to time, and you will need to monitor this link yourself if you wish to be aware of changes</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 1</strong><br/> Processing of your HESA information for Purpose 1 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).<br/> Processing of Special Categories of data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 2 - Administrative uses</strong></p> <p>Your named data may be processed by public authorities for the detection or prosecution of fraud. These uses of your HESA information may result in decisions being made about you.</p> </div> <p>In the exercise of their official authority it may be necessary for the four UK higher education funding bodies listed in Purpose 1 to use your HESA information which is passed to them for Purpose 1 to identify you and take decisions about you as an individual for the following purposes only:</p> <p><strong>Fraud detection and prevention</strong> - Your HESA information may be used to audit claims to public funding and student finance, and to detect and prevent fraud.</p> <p><strong>Previous study</strong> - If your higher education provider is in England: The Office for Students (OfS) may share your previous education records with this provider, including HESA information submitted by other higher education providers, to determine the nature of any prior higher education study, including your current qualifications. This may be used to make decisions about the fees you are required to pay, the support available to you or the availability of a place for you to study with a higher education provider.</p> <p>For these purposes your HESA information may be held separately (in addition to being held within datasets for Purpose 1) and retained for as long as necessary for the purposes of detection or prosecution of fraud and any associated legal or audit purposes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 2</strong><br/> Processing of your HESA information for Purpose 2 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 3 - HESA publications</strong></p> <p>HESA publishes statistics about students in higher education.</p> </div> <p>Part of HESA’s role is to produce and publish information about higher education in the public interest. This includes some National Statistics publications (<a href="http://web.archive.org/web/20230201065042/http://www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics">www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics</a>) and online business intelligence and research services.</p> <p>When producing this material for publication, HESA applies its disclosure control, the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA Standard Rounding Methodology</a>, to ensure that no Personal Data is included and that individuals cannot be identified from published material.</p> <p>Processing within this Purpose 3 may also be carried out by HESA Services Limited, HESA's wholly-owned subsidiary company.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 3</strong><br/> Processing of your HESA information for Purpose 3 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).<br/> Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the Equality Act 2010 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 4 - Equal opportunity, research, journalism and other processing for statistical and research purposes</strong></p> <p>HESA information is used for research into higher education and the student population. This research can be academic, commercial, journalistic or for personal reasons. HESA prohibits the identification of individual students by those carrying out this research and information is not shared on a named basis.</p> </div> <p>HESA and the other data controllers in common (see Purpose 1) may also supply information to third parties where there is a legitimate interest in doing so for statistical and research purposes. Examples of use for this purpose include:</p> <ul> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students</li> </ul> <p>Users to whom information may be supplied for Purpose 4 include:</p> <ul> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties within Purpose 4 is supplied under contracts which require that individuals shall not be identified from the supplied information and this means that they also cannot use it to take decisions about you. A copy of HESA’s current agreement for the supply of information is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">www.hesa.ac.uk/services/custom/data/timescales-costs</a>. Each agreement specifies the duration for which data may be processed. This is usually one year but may be longer if necessary for the specific research purpose. Each request for HESA information under Purpose 4 is assessed for its compliance with data protection legislation and its compatibility with this Collection Notice. HESA ensures that only the minimum amount of HESA information necessary for the specified research purpose is supplied to users. If the supplied information is to be published <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA's Rounding Methodology</a> or an equivalent disclosure control must be applied to ensure that individuals cannot be identified from the published material and it does not constitute Personal Data.</p> <p>HESA student information may be linked to school and/or further education college information and supplied to researchers. A copy of the Agreement for the supply of linked data about pupils from schools in England is available at <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/collections/national-pupil-database">www.gov.uk/government/collections/national-pupil-database</a>.</p> <p>Processing within this Purpose 4 is carried out by HESA, HESA Services Limited, HESA's wholly-owned subsidiary company. Other data controllers (listed under Purpose 1 above) may also process data for this purpose where this is necessary to fulfil their public functions.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 4</strong><br/> Processing of your HESA information for Purpose 4 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)).<br/> Processing may also be necessary for the purposes of the legitimate interests of HESA in disseminating higher education information, or the legitimate interests of third parties in undertaking research in the field of higher education (See GDPR Article 6(1)(f)).<br/> In either case processing of your HESA information is necessary for statistical and research purposes in accordance with GDPR Article 89(1).<br/> Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Linking of your HESA information to other information</strong></p> <p>HESA information is sometimes linked to other data sources to enable more detailed research and analysis.</p> </div> <p>As indicated above, where HESA and organisations covered by Purpose 1 use HESA information this may include linking named or pseudonymised HESA information to other information for research purposes. Examples include linking to:</p> <ul> <li>UCAS data – to understand entry rates to higher education</li> <li>National Student Survey data – to place the results of this survey in context</li> <li>School and Further Education data – to research progression to higher education</li> <li>Student Loans Company data – to research the use of student finance</li> <li>Qualification Awarding Bodies data – to research the value and outcomes of qualifications</li> <li>Tax, Benefits, and Employment data – to research the salaries of graduates and to better understand the outcomes of education (Guidance on the use of HESA records matched to Tax, Benefits and Employment data is available at: <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data">www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data</a>)</li> <li>If you are a medical student your HESA information may be included in the UKMED research database (<a href="http://web.archive.org/web/20230201065042/http://www.ukmed.ac.uk/">www.ukmed.ac.uk</a>). The General Medical Council is the data controller for this database used for researching doctors’ progression through their education and training.</li> </ul> <p>Where HESA provides information from your HESA information to third parties under Purpose 4, the permitted uses of the information by a third party may include linking HESA information to other information held by the third party. Permission for such use is considered on a case by case basis. It is only given where the linking is for the purposes outlined in Purpose 4 and subject to the requirement not to carry out linking to identify individuals.</p> <p><strong>Destinations information for schools and colleges</strong> – If you attended a school or college in England or Wales linked data may be disclosed to the last school or college you attended (or its successor body) and to Ofsted or Estyn in the exercise of their official authority to enable them to assess the outcomes of secondary education.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>The HESA Initial Teacher Training record (“ITT”)</strong></p> <p>Information about teacher training students in England is submitted to the Department for Education (DfE) and the Teaching Regulation Agency (TRA) via HESA.</p> </div> <p>If you are on an ITT course at a higher education provider in England, HESA will collect additional information about you and provide this to the DfE and TRA. ITT courses are those that lead to Qualified Teacher Status (QTS) or Early Years Teacher Status (EYTS).</p> <p>The TRA is an executive agency of the Department for Education (DfE) and, for the purposes of the Data Protection Act 1998 and the GDPR, DfE and HESA are data controllers in common of the ITT record.</p> <p>DfE will process your personal data in exercise of its official authority, namely the funding, administration and monitoring of ITT schemes in England. DfE will use your data to establish a record on the Initial Teacher Training Data Management System (ITTDMS) and register your course details and subsequent completion.</p> <p>TRA will process your personal data in the exercise of its official authority, namely the award of QTS and EYTS and the maintenance of the list of teachers in England. TRA will use your data to establish a record on the database of teachers and allocate to you a teacher reference number (TRN). TRA will contact you to provide confirmation of your TRN and any subsequent award of QTS.</p> <p>DfE and TRA may share personal data with your provider, and where the law allows it or there is a legal requirement for sharing to take place, its partners and contractors for this purpose and may link it to other sources of information about you. Partners include employers of teachers, teacher employment agencies, Ofsted, Capita Teachers’ Pensions and other executive agencies of the DfE.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Student and leaver surveys</strong></p> <p>You may be asked to provide information about your experience as a student and your activities after you graduate as part of national surveys.</p> </div> <p>Your contact details may be passed to survey contractors to carry out the National Student Survey (NSS), other surveys of students’ views about their study, and surveys of student finances, on behalf of some of the organisations listed under Purpose 1 above.</p> <p>After you graduate you may be contacted and asked to complete one or more surveys into the outcomes of higher education and your activities after graduation. These surveys are used to create statistics to meet the public interest in the outcomes of higher education. Information from third parties (such as your parent, or your provider if you’re in further study) might be used to complete sections of the surveys if you can’t be contacted. The surveys may be undertaken by your provider or by an organisation contracted for that purpose. Your provider will hold your contact details after you graduate in order for you to be contacted to complete a graduate outcomes survey.</p> <p>Your contact details may be passed to HESA and/or an organisation contracted to undertake a graduate outcomes survey. The survey contractor will only use your contact details for the survey and will delete them when the survey is closed. HESA may hold your contact details for further graduate outcomes surveys where these are in the public interest.</p> <p>Your responses to the survey of graduate outcomes will be made available to your provider, and your provider may choose to add additional questions to the survey for their own use.</p> <p>Further privacy and data protection information will be provided if you are contacted for any of these surveys. You might also be contacted as part of an audit to check that the survey has been undertaken properly.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information to conduct national surveys</strong><br/> Processing of your information to conduct the student and graduate surveys is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Your rights</strong></p> <p>Data protection legislation gives you rights over your personal data. These include rights to know what information is processed about you and how it is processed. These rights have to be met by HESA and any other organisation which takes decisions about how or why your information is processed.</p> </div> <p>You have the right to be informed about how your personal data is used. This Student Collection Notice is regularly reviewed to ensure that it accurately describes how your HESA information is used. This notice may be updated from time to time, for example when new legislation is enacted, or when new policies are implemented by the public authorities listed under Purpose 1. The most up to date version can always be found at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>For further information about data protection and HESA’s data protection officer please see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a>. If you have questions about how your HESA information is used, please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#d4b0b5a0b5faa4a6bba0b1b7a0bdbbba94bcb1a7b5fab5b7faa1bf"><span class="__cf_email__" data-cfemail="cfabaebbaee1bfbda0bbaaacbba6a0a18fa7aabcaee1aeace1baa4">[email protected]</span></a>.</p> <p>Under the General Data Protection Regulation, you have the right of access to your personal information. You also have additional rights i.e. the right to rectify inaccurate information; restrict processing; and object to processing. These rights are limited in certain circumstances by the GDPR, and may be limited further by future UK legislation where data is only processed for research or statistical purposes. If you think there is a problem with the way HESA are handling your data, you have the right to complain to the Information Commissioner's Office: <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/">ico.org.uk</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Data transfers to other countries</strong></p> <p>Your HESA information may be transferred to countries outside the European Union for the purposes described above.</p> </div> <p>Your HESA information will only be transferred to countries whose data protection laws have been assessed as adequate by the European Commission, or where adequate safeguards, such as the EU-US Privacy Shield, are in place to protect your HESA information. European Commission decisions on the adequacy of the protection of personal data in third countries are published here: <a href="http://web.archive.org/web/20230201065042/http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm">ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en</a>.</p> </div> </div> <div class="accordion-item"><a aria-controls="Student2016" aria-expanded="false" class="accordion-toggle" href="#Student2016" name="Student2016" role="button">28 June 2016 to 26 June 2017</a></p> <div class="accordion-content" id="Student2016"> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2016-17.pdf">HESA_Student_Collection_Notice_2016-17.pdf</a></p> <h2><a id="student" name="student"><strong>Student collection notice 2016-2017</strong></a></h2> <p><strong>Note: </strong>Reference in this notice to <strong>"we"</strong> and <strong>"us"</strong> refers to the higher education provider which you attended.</p> <h3><strong>Student and leaver surveys</strong></h3> <p>Your contact details may be passed to survey contractors to carry out the <a href="http://web.archive.org/web/20230201065042/https://www.ipsos-mori.com/researchspecialisms/socialresearch/specareas/highereducation/nss.aspx" target="_blank">National Student Survey</a> (NSS) and surveys of student finances, on behalf of some of the organisations listed below under Purpose 1. These organisations and their contractors will use your details only for that purpose, and will then delete them.</p> <p>After you graduate we may contact you to ask you to complete one or more surveys into the outcomes of higher education and your activities after graduation. These surveys may be undertaken by us or by another specialist organisation contracted for that purpose. If a specialist organisation is used that organisation will receive your contact details, but will only use your details for the purpose of asking you to complete the survey, and will then delete them. You may also be contacted as part of an audit to check that we or any contracted organisation have undertaken these surveys properly.</p> <p>If you do not want to take part in any of these surveys, please let us know</p> <h3><strong>Submission of your information to the Higher Education Statistics Agency (HESA)<sup>1 </sup></strong></h3> <p>Every year we will send some of the information we hold about you to HESA (“your HESA information”). HESA is the official source of data about UK universities, higher education colleges, alternative HE providers, and recognised higher education courses taught at further education institutions in Wales. HESA collects, and is responsible for, the database in which your HESA information is stored. HESA is a registered charity and operates on a not-for-profit basis. HESA uses your HESA information itself for its own purposes. HESA also shares information from your HESA information with third parties. It may charge other organisations to whom it provides services and data. HESA's use of your HESA information may include linking information from it to other information, as described further below. HESA information is retained indefinitely by HESA for statistical research purposes. All uses of HESA information must comply with the <a href="http://web.archive.org/web/20230201065042/http://www.legislation.gov.uk/ukpga/1998/29/contents" target="_blank">Data Protection Act 1998</a>.</p> <h4><strong>Sensitive information</strong></h4> <p>If you give us information about your disability status, ethnicity, sexual orientation, gender reassignment or religion these may be included in your HESA information and used to assist with monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act. Some other sensitive information is used to enable research into the provision of fair access to higher education, for example information as to whether you are a care leaver.</p> <p>If you are enrolled at a higher education provider in England regulated by the Higher Education Funding Council for England your HESA information will include details of any financial support you may receive from us.</p> <p>Your sensitive information will not be used to make decisions about you.</p> <h3><strong>Purposes for collecting your HESA information</strong></h3> <p>Your HESA information including linked data is used for four broad purposes<strong>:</strong></p> <h4><strong>Purpose 1 - Public functions</strong></h4> <p><strong>Education statistics and data</strong></p> <p>Your HESA information is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of your HESA information under the terms of the Data Protection Act (<a href="http://web.archive.org/web/20230201065042/http://ico.org.uk/for-organisations/guide-to-data-protection/key-definitions/" target="_blank">this link</a> explains what this means). Such organisations may include:</p> <ul class="ul"> <li>Department for Education</li> <li>Department for Business, Energy and Industrial Strategy</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for the Economy, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Research Councils</li> <li>Education Funding Agency</li> <li>Skills Funding Agency</li> <li>National College for Teaching and Leadership</li> <li>National Health Service bodies and organisations working with them e.g. Health Education England</li> <li>General Medical Council</li> <li>Office For Fair Access</li> <li>Quality Assurance Agency for Higher Education</li> </ul> <p>and any successor bodies. These bodies may retain HESA information indefinitely for statistical research purposes, or for fixed terms depending on the terms of their data sharing agreements with HESA.</p> <p><strong>Other uses</strong></p> <p>Your HESA information may also be used by some organisations who are also data controllers in common to help carry out public functions that are not connected with education. Such uses may include the following:</p> <ul class="ul"> <li>Measurement of population levels and migration by the Office for National Statistics, National Records of Scotland and the Northern Ireland Statistics and Research Agency</li> <li>Monitoring of public expenditure by the National Audit Office</li> <li>Monitoring of the accuracy of electoral registers by Electoral Registration Officials.</li> </ul> <h4><strong>Purpose 2 - Administrative uses </strong></h4> <p><strong>Fraud detection and prevention</strong> - Your HESA information may be used to audit claims to public funding and student finance, and to detect and prevent fraud.</p> <p><strong>Previous study</strong> - If you are enrolled at a higher education provider in England: The Higher Education Funding Council for England (HEFCE) may share your previous education records with us, including HESA information submitted by other institutions, to determine the nature of any prior higher education study, including your current qualifications. This may be used to make decisions about the fees you are required to pay, the support available to you or the availability of a place for you to study with us.</p> <p><strong>Your HESA information will not be used to make decisions about you other than for those uses outlined under Purpose 2.</strong></p> <h4><strong>Purpose 3 - HESA publications </strong></h4> <p>HESA uses your HESA information to produce and publish information and statistics. This includes some <a href="http://web.archive.org/web/20230201065042/http://www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics" target="_blank">National Statistics publications</a> and online business intelligence and research services. HESA will take precautions to ensure that individuals are not identified from any information which is processed for Purpose 3.</p> <h4><strong>Purpose 4 - Equal opportunity, research, journalism and other processing in which there is a legitimate interest </strong></h4> <p>HESA and the other data controllers in common (see Purpose 1) may also supply information to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:</p> <ul class="ul"> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students.</li> </ul> <p>Users to whom information may be supplied for Purpose 4 include:</p> <ul class="ul"> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists.</li> </ul> <p>Information supplied by HESA to third parties within Purpose 4 is supplied under contracts which require that individuals shall not be identified from the supplied information. A copy of HESA’s current agreement for the supply of information is available <a href="/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">here</a>.</p> <p>HESA student information may be linked to school and/or further education college information and supplied to researchers. A copy of the Agreement for the supply of linked data about pupils from schools in England is available <a href="http://web.archive.org/web/20230201065042/http://www.gov.uk/government/collections/national-pupil-database" target="_blank">here</a>.</p> <h4><strong>Linking of your HESA information to other information </strong></h4> <p>As indicated above, where HESA and organisations covered by Purpose 1 use HESA information this may include linking HESA information to other information for example:</p> <ul class="ul"> <li>UCAS data</li> <li>National Student Survey data</li> <li>School and Further Education data</li> <li>Student Loans Company data</li> <li>Qualification Awarding Bodies data</li> <li>Tax, Benefits, and Employment data. (Guidance on the use of HESA records matched to Tax, Benefits and Employment data is available <a href="http://web.archive.org/web/20230201065042/http://www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data" target="_blank">here</a>).</li> </ul> <p>Where HESA provides information from your HESA information to third parties under Purpose 4, the permitted uses of the information by a third party may include linking HESA information to other information held by the third party. Permission for such use is considered on a case by case basis. It is only given where the linking is for the purposes outlined in Purpose 4 and subject to the requirement not to carry out linking to identify individuals.</p> <p>Destinations information for schools and colleges – If you attended a school or college in England linked data may be disclosed to the last school or college you attended (or its successor body) and to Ofsted to enable them to assess the outcomes of secondary education.</p> <h3>The HESA Initial Teacher Training record (ITT)</h3> <p>If you are on an ITT or EYITT course at a higher education provider in England, HESA will collect additional information about you and provide this to The National College for Teaching and Leadership (NCTL).</p> <p>ITT or EYITT courses are those that lead to Qualified Teacher Status (QTS) or Early Years Teacher Status (EYTS)</p> <p>NCTL is an executive agency of the Department for Education (DfE) and for the purposes of the Data Protection Act 1998 DfE and HESA are data controllers in common of the ITT record. NCTL will process your personal data for the administration and monitoring of initial teacher training schemes, including the allocation of teacher reference numbers (TRNs). NCTL will contact you to provide confirmation of your TRN and any subsequent award of qualified teacher status. NCTL may share personal data with us, its partners and contractors, including employers, employment agencies, Ofsted, Capita Teachers’ Pensions and the Department for Business, Innovation and Skills (BIS), for this purpose and may link it to other sources of information about you.</p> <h3><strong>About the HESA student collection notice</strong></h3> <p>The HESA Student Collection Notice is regularly reviewed. The most up to date version can be found here. Minor updates to the Student Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose or administrative use) will be made no more than once per year.</p> <h3><strong>Your rights</strong></h3> <p>For further information about data protection and your HESA information please see <a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection">here</a>. If you have questions about how your HESA information is used please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#bedadfcadf90ceccd1cadbddcad7d1d0fed6dbcddf90dfdd90cbd5"><span class="__cf_email__" data-cfemail="03676277622d73716c776660776a6c6d436b6670622d62602d7668">[email protected]</span></a>. Under the Data Protection Act 1998 you have rights of access to the information HESA holds about you. You will have to pay a small fee for this. If you think there is a problem with the way HESA are handling your data you have the right to complain to the <a href="http://web.archive.org/web/20230201065042/http://ico.org.uk/" target="_blank">Information Commissioner's Office</a>.</p> </div> </div> <div class="accordion-item"><a aria-controls="Student2015" aria-expanded="false" class="accordion-toggle" href="#Student2015" name="Student2015" role="button">05 June 2015 to 28 June 2016</a></p> <div class="accordion-content" id="Student2015"> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2015-16.pdf">HESA_Student_Collection_Notice_2015-16.pdf</a></p> <h2><a id="stu15" name="stu15"><strong>Student Collection Notice 2015-2016</strong></a></h2> <p><strong>Note: </strong>Reference in this notice to <strong>"we"</strong> and <strong>"us"</strong> refers to the higher education provider which you attended.</p> <p><strong>STUDENT AND LEAVER SURVEYS</strong></p> <p>Your contact details may be passed to survey contractors to carry out the <a href="http://web.archive.org/web/20230201065042/http://www.thestudentsurvey.com/">National Student Survey</a> (NSS) and surveys of student finances, on behalf of some of the organisations listed below under Purpose 1. These organisations and their contractors will use your details only for that purpose, and will then delete them.</p> <p>About six months after you graduate, we may contact you to ask you to fill in the Higher Education Statistics Agency (HESA)<sup>[<a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/index.php?option=com_content&view=article&id=2459&limit=&start=#ftne1">1</a>]</sup>‘Destinations of Leavers from HE’ questionnaire. You may also be contacted as part of an audit to check that we have undertaken this survey properly. We will not give your contact details to HESA.</p> <p>You may also be included in longitudinal surveys of leavers in the years after you graduate. If so, we will pass your contact details to the organisation that has been contracted to carry out that survey. That organisation will use your details only for that purpose, and will then delete them.</p> <p>If you do not want to take part in any of these surveys, please let us know.</p> <p><strong>SUBMISSION OF YOUR INFORMATION TO HESA</strong></p> <p>Every year we will send some of the information we hold about you to HESA (“your HESA information”). HESA is the official source of data about UK universities and higher education colleges <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/">www.hesa.ac.uk</a>. HESA collects, and is responsible for, the database in which your HESA information is stored. HESA is a registered charity and operates on a not-for-profit basis. HESA uses your HESA information itself for its own purposes. HESA also shares information from your HESA information with third parties. It may charge other organisations to whom it provides services and data. HESA's use of your HESA information may include linking information from it to other data, as described further below. All uses of HESA information must comply with the Data Protection Act 1998 <a href="http://web.archive.org/web/20230201065042/http://www.legislation.gov.uk/ukpga/1998/29/contents">www.legislation.gov.uk/ukpga/1998/29/contents</a>.</p> <p><strong>Sensitive information</strong></p> <p>If you give us information about your disability status, ethnicity, sexual orientation, gender reassignment or religion these may be included in your HESA information and used to assist with monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act. Some other sensitive information is used to enable research into the provision of fair access to higher education, for example information as to whether you are a care leaver.</p> <p>If you are enrolled at a higher education provider in England regulated by the Higher Education Funding Council for England your HESA information will include details of any financial support you may receive from us.</p> <p>Your sensitive information will not be used to make decisions about you. Your HESA information including linked data is used for four broad purposes:</p> <p><strong>Purpose 1 - Public functions</strong></p> <p><strong>Education statistics and data</strong></p> <p>Your HESA information is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of your HESA information under the terms of the Data Protection Act (this link explains what this means <a href="http://web.archive.org/web/20230201065042/http://ico.org.uk/for-organisations/guide-to-data-protection/key-definitions/">ico.org.uk/for-organisations/guide-to-data-protection/key-definitions/</a> ). Such organisations may include:</p> <ul> <li>Department for Business, Innovation and Skills</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for Employment and Learning, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Department for Education</li> <li>Research Councils</li> <li>Education Funding Agency</li> <li>National College for Teaching and Leadership</li> <li>National Health Service</li> <li>General Medical Council</li> <li>Office For Fair Access</li> <li>Quality Assurance Agency for Higher Education</li> </ul> <p>and any successor bodies.</p> <p><strong>Other uses</strong></p> <p>Your HESA information may also be used by some organisations who are also data controllers in common to help carry out public functions that are not connected with education. Such uses may include the following:</p> <ul> <li>Measurement of population levels and migration by the Office for National Statistics, National Records of Scotland and the Northern Ireland Statistics and Research Agency</li> <li>Monitoring of public expenditure by the National Audit Office</li> <li>Monitoring of the accuracy of electoral registers by Electoral Registration Officials.</li> </ul> <p><strong>Purpose 2 - Administrative uses</strong></p> <p><strong>Fraud detection and prevention</strong> - Your HESA information may be used to audit claims to public funding and student finance, and to detect and prevent fraud.</p> <p><strong>Previous study</strong> - If you are enrolled at an HE provider in England: The Higher Education Funding Council for England (HEFCE) may share your previous education records with us, including HESA information submitted by other institutions, to determine the nature of any prior higher education study, including your current qualifications. This may be used to make decisions about the fees you are required to pay, the support available to you or the availability of a place for you to study with us.</p> <p><strong>Your HESA information will not be used to make decisions about you other than for those uses outlined under Purpose 2.</strong></p> <p><strong>Purpose 3 - HESA publications</strong></p> <p>HESA uses your HESA information to produce and publish information and statistics. This includes some National Statistics publications (<a href="http://web.archive.org/web/20230201065042/http://www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics">www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics</a>) and online business intelligence and research services. HESA will take precautions to ensure that individuals are not identified from any information which is processed for Purpose 3.</p> <p><strong>Purpose 4 - Equal opportunity, research, journalism and other processing in which there is a legitimate interest</strong></p> <p>HESA and the other data controllers in common (see Purpose 1) may also supply information to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:</p> <ul> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students</li> </ul> <p>Users to whom information may be supplied for Purpose 4 include:</p> <ul> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties within Purpose 4 is supplied under contracts which require that individuals shall not be identified from the supplied information. A copy of HESA’s current agreement for the supply of information is available at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/bds-details#e">www.hesa.ac.uk/bds-details#e</a>. HESA student information may be linked to school and/or further education college information and supplied to researchers. A copy of the Agreement for the supply of linked data about pupils from schools in England is available at <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/collections/national-pupil-database">www.gov.uk/government/collections/national-pupil-database</a></p> <p><strong>LINKING OF INFORMATION IN THE HESA RECORD</strong></p> <p>As indicated above, where HESA and organisations covered by Purpose 1 use HESA information this may include linking HESA information to other information for example:</p> <ul> <li>UCAS data</li> <li>National Student Survey data</li> <li>School and Further Education data</li> <li>Student Loans Company data</li> <li>Qualification Awarding Bodies data</li> <li>Tax, Benefits, and Employment data.</li> </ul> <p>Where HESA provides information from your HESA information to third parties under Purpose 4, the permitted uses of the information by a third party may include linking HESA information to other information held by the third party. Permission for such use is considered on a case by case basis. It is only given where the linking is for the purposes outline in Purpose 4 and subject to the requirement not to carry out linking to identify individuals.</p> <p><strong>Destinations information for schools and colleges</strong> – If you attended a school or college in England linked data may be disclosed to the last school or college you attended (or its successor body) to enable them to assess the outcomes of secondary and further education.</p> <p><strong>THE HESA INITIAL TEACHER TRAINING RECORD (“ITT”)</strong></p> <p>If you are on an ITT or EYITT course at a higher education provider in England, HESA will collect additional information about you and provide this to The National College for Teaching and Leadership (NCTL).</p> <p>ITT or EYITT courses are those that lead to Qualified Teacher Status (QTS) or Early Years Teacher Status (EYTS)</p> <p>NCTL is an executive agency of the Department for Education (DfE) and for the purposes of the Data Protection Act 1998 DfE and HESA are data controllers in common of the ITT record. NCTL will process your personal data for the administration and monitoring of initial teacher training schemes, including the allocation of Teacher Reference Numbers. NCTL may share personal data with us, its partners and contractors, including employers, employment agencies, Ofsted, Capita Teachers’ Pensions and the Department for Business, Innovation and Skills (BIS), for this purpose and may link it to other sources of information about you.</p> <p><strong>ABOUT THE HESA STUDENT COLLECTION NOTICE</strong></p> <p>The HESA Student Collection Notice is regularly reviewed. The most up to date version can be found at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>. Minor updates to the Student Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose or administrative use) will be made no more than once per year.</p> <p><strong>YOUR RIGHTS</strong></p> <p>Under the Data Protection Act 1998 you have rights of access to the information HESA holds about you. You will have to pay a small fee for this. For further information about data protection and your HESA information please see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a> or email <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#50343124317e20223f24353324393f3e10383523317e31337e253b"><span class="__cf_email__" data-cfemail="4d292c392c633d3f2239282e392422230d25283e2c632c2e633826">[email protected]</span></a>.</p> </div> </div> <div class="accordion-item"><a aria-controls="Student2014" aria-expanded="false" class="accordion-toggle" href="#Student2014" name="Student2014" role="button">13 May 2014 to 05 June 2015</a></p> <div class="accordion-content" id="Student2014"> <p><a href="www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2014-15.pdf">HESA_Student_Collection_Notice_2014-15.pdf</a></p> <h2><strong>Student Collection Notice 2014-2015</strong></h2> <p>Published 13 May 2014 - replaced with 2015-16 version on 05 June 2015</p> <p><strong>Note: </strong>Reference in this notice to <strong>"we"</strong> and <strong>"us"</strong> refers to the higher education provider which you attended.</p> <p>Your contact details may be passed to survey contractors to carry out the <a href="http://web.archive.org/web/20230201065042/http://www.thestudentsurvey.com/">National Student Survey</a> (NSS) and surveys of student finances, on behalf of some of the organisations listed below under Purpose 1. These organisations and their contractors will use your details only for that purpose, and will then delete them.</p> <p>About six months after you graduate, we will contact you to ask you to fill in the Higher Education Statistics Agency (HESA) ‘Destinations of Leavers from HE’ questionnaire. You may also be contacted as part of an audit to check that we have undertaken this survey properly. We will not give your contact details to HESA.</p> <p>You may also be included in longitudinal surveys of leavers in the years after you graduate. If so, we will pass your contact details to the organisation that has been contracted to carry out that survey. That organisation will use your details only for that purpose, and will then delete them.</p> <p>If you do not want to take part in any of these surveys, please let us know.</p> <p><strong>SUBMISSION OF YOUR INFORMATION TO HESA</strong></p> <p>Every year we will send some of the information we hold about you to HESA (“your HESA information”). HESA collects, and is responsible for, the database in which your HESA information is stored. HESA uses this information in its own right, for example to publish statistics about students in higher education. HESA may link information we have provided to other related datasets such as UCAS, NSS, Individual Learner Record and Student Loan Company data (“linked data”). All uses of your HESA information and linked data must comply with the Data Protection Act 1998.</p> <p>HESA is a registered charity and operates on a not-for-profit basis. It may charge other organisations to whom it provides services and information.</p> <p><strong>Sensitive information</strong></p> <p>If you give us information about your disability status, ethnicity, sexual orientation, gender reassignment or religion these may be included in your HESA information and used to assist with monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act. Some other sensitive information is used to enable research into the provision of fair access to higher education, for example information as to whether you are a care leaver.</p> <p>If you are enrolled at a higher education provider in England regulated by the Higher Education Funding Council for England your HESA information will include details of any financial support you may receive from us.</p> <p>Your sensitive information will not be used to make decisions about you.</p> <p>Your HESA information including linked data is used for four broad purposes:</p> <p><strong>Purpose 1 - Public functions</strong></p> <p><strong>Education statistics and data </strong></p> <p>Your HESA information is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of your HESA information under the terms of the Data Protection Act. Such organisations may include:</p> <ul class="unIndentedList"> <li>Department for Business, Innovation and Skills</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for Employment and Learning, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Department for Education</li> <li>Research Councils</li> <li>Skills Funding Agency</li> <li>National College for Teaching and Leadership</li> <li>National Health Service (including Health Education England)</li> <li>General Medical Council</li> <li>Office For Fair Access</li> <li>Quality Assurance Agency for Higher Education</li> </ul> <p> </p> <p>and any successor bodies. These organisations may link your HESA information with other information they or other organisations hold. For example:</p> <ul class="unIndentedList"> <li>The Department for Education and the Department for Business Innovation and Skills link your HESA information to the National Pupil Database and the Individual Learner Record.</li> <li>Your HESA information is linked to information from the Student Loan Company by the HE Funding Councils.</li> <li>Your HESA information may also be linked to tax information or employment information.</li> </ul> <p>Linked data is used for research into education and its outcomes.</p> <p><strong>Other uses</strong></p> <p>Your HESA information may also be used by some organisations to help carry out public functions that are not connected with education. Such uses may include the following:</p> <ul class="unIndentedList"> <li>Measurement of population levels and migration by the Office for National Statistics, National Records of Scotland and the Northern Ireland Statistics and Research Agency</li> <li>Monitoring of public expenditure by the National Audit Office</li> <li>Monitoring of the accuracy of electoral registers by Electoral Registration Officials.</li> </ul> <p><strong>Purpose 2 - Administrative uses</strong></p> <p><strong>Fraud detection and prevention</strong> – Your HESA information may be used to audit claims to public funding and student finance, and to detect and prevent fraud.</p> <p><strong>Your HESA information will not be used to make decisions about you other than for those uses outlined under Purpose 2.</strong></p> <p><strong>Purpose 3 - HESA publications</strong></p> <p>HESA uses the HESA Student Record to produce statistical publications. These include some <a href="http://web.archive.org/web/20230201065042/http://www.statistics.gov.uk/hub/what-are-national-statistics-">National Statistics</a> publications and online management information services.  HESA will take precautions to ensure that individuals are not identified from the data which are processed for Purpose 3.</p> <p><strong>Purpose 4 - Equal opportunity, research, journalism and other processing in which there is a legitimate interest</strong></p> <p>HESA and the other data controllers listed under Purpose 1 may also supply data to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:</p> <ul class="unIndentedList"> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students</li> </ul> <p>Users to whom data may be supplied for Purpose 4 include:</p> <ul class="unIndentedList"> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties is supplied under contracts which require that individuals shall not be identified from the supplied information. A copy of HESA’s current agreement for the supply of information is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/bds-details#e">www.hesa.ac.uk/bds-details#e</a>. HESA student information (linked to the National Pupil Database and/or Individual Learner Record held by DfE) may be supplied by HESA through DfE to researchers. A copy of the Agreement for the supply of linked data is available at <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/collections/national-pupil-database">www.gov.uk/government/collections/national-pupil-database</a></p> <p><strong>THE HESA INITIAL TEACHER TRAINING RECORD ("ITT") </strong></p> <p>If you are on an ITT course at a higher education provider in England, HESA will collect additional information about you and provide this to The National College for Teaching and Leadership (NCTL).</p> <p>NCTL is an executive agency of the Department for Education (DfE) and for the purposes of the Data Protection Act 1998 DfE and HESA are data controllers in common of the ITT record. NCTL will process your personal data for the administration and monitoring of initial teacher training schemes, including the allocation of Teacher Reference Numbers. NCTL may share personal data with us, its partners and contractors, including employers, employment agencies, Ofsted, Capita Teachers’ Pensions and the Department for Business, Innovation and Skills (BIS), for this purpose and may link it to other sources of information about you.</p> <p><strong>ABOUT THE HESA STUDENT COLLECTION NOTICE</strong></p> <p>The HESA Student Collection Notice is regularly reviewed.  The most up to date version can be found at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>. Minor updates to the Student Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose or administrative use) will be made no more than once per year.</p> <p><strong>YOUR RIGHTS</strong></p> <p>Under the Data Protection Act 1998 you have rights of access to the data HESA holds about you. You will have to pay a small fee for this. For further information about data protection and your HESA information please see <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a> or email <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#462227322768363429322325322f2928062e23352768272568332d"><span class="__cf_email__" data-cfemail="2e4a4f5a4f005e5c415a4b4d5a4741406e464b5d4f004f4d005b45">[email protected]</span></a></p> </div> </div> <div class="accordion-item"><a aria-controls="Student2013" aria-expanded="false" class="accordion-toggle" href="#Student2013" name="Student2013" role="button">02 May 2013 to 13 May 2014</a></p> <div class="accordion-content" id="Student2013"> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2013-14.pdf">HESA_Student_Collection_Notice_2013-14.pdf</a></p> <h2><strong><a name="Student2013"></a>Student Collection Notice 2013-2014</strong></h2> <p>Published 02 May 2013 - replaced with 2014-2015 version on 13 May 2014</p> <p><strong>STUDENT AND LEAVER SURVEYS</strong></p> <p>Your contact details may be passed to survey contractors to carry out the <a href="http://web.archive.org/web/20230201065042/http://www.thestudentsurvey.com/">National Student Survey</a> (NSS) and surveys of student finances, on behalf of the organisations listed below under Purpose 1. These organisations and their contractors will use your details only for that purpose, and will then delete them.</p> <p>About six months after you graduate, we will contact you to ask you to fill in the Higher Education Statistics Agency (HESA) ‘Destinations of Leavers from HE’ questionnaire. We will not give your contact details to HESA.</p> <p>You may also be included in longitudinal surveys of leavers in the years after you graduate. If so, we will pass your contact details to the organisation that has been contracted to carry out that survey. That organisation will use your details only for that purpose, and will then delete them.</p> <p>If you do not want to take part in any of these surveys, please let us know.</p> <p><strong>THE HESA STUDENT RECORD</strong></p> <p>We will send some of the information we hold about you to HESA. HESA collects, and is responsible for, the database in which your HESA student record is stored. HESA uses this information in its own right, for example to publish statistics about students in higher education. HESA may link information from the HESA student record to other related datasets such as UCAS, NSS and Student Loan Company data. All uses of the HESA Student Record must comply with the Data Protection Act 1998.</p> <p>HESA is a registered charity and operates on a not-for-profit basis. It may charge other organisations to whom it provides services and data.</p> <p><strong>Sensitive information</strong></p> <p>If you give us information about your disability status, ethnicity, sexual orientation, gender reassignment or religion these may be included in the HESA Student Record to assist with monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act.</p> <p>If you are enrolled at a higher education institution in England regulated by the Higher Education Funding Council for England the HESA student record will include details of any financial support you may receive from us to enable research into the provision of fair access to higher education.</p> <p>Your sensitive information will not be used to make decisions about you.</p> <p>The HESA Student Record is used for four broad purposes:</p> <p><strong>Purpose 1 - Public functions</strong></p> <p><strong>Education statistics and data </strong></p> <p>The HESA Student Record is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of the HESA Student Record under the terms of the Data Protection Act. Such organisations include:</p> <ul class="unIndentedList"> <li>Department for Business, Innovation and Skills</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for Employment and Learning, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Department for Education</li> <li>Research Councils</li> <li>Skills Funding Agency</li> <li>National College for Teaching and Leadership</li> <li>National Health Service (including Health Education England)</li> <li>General Medical Council</li> <li>Office For Fair Access</li> <li>Quality Assurance Agency for Higher Education</li> </ul> <p> </p> <p>and any successor bodies. These organisations may link information from the HESA Student Record with other information they hold. For example the Department for Education and the Department for Business Innovation and Skills link the HESA Student Record to the National Pupil Database and the Individual Learner Record. The Funding Councils link the HESA Student Record to data from the Student Loan Company. Linked data is used for research into education.</p> <p><strong>Other uses</strong></p> <p>The HESA Student Record may also be used by some organisations to help carry out public functions that are not connected with education. Such uses may include the following:</p> <ul class="unIndentedList"> <li>Measurement of population levels and migration by the Office for National Statistics, National Records of Scotland and the Northern Ireland Statistics and Research Agency</li> <li>Monitoring of public expenditure by the National Audit Office</li> <li>Monitoring of the accuracy of electoral registers by Electoral Registration Officials.</li> </ul> <p><strong>Purpose 2 - Administrative uses</strong></p> <p><strong>Previous Qualifications</strong> -If you are enrolled at an institution in England: We and the Higher Education Funding Council for England (HEFCE) may compare your data to educational records from previous years to help determine the levels of your current qualifications. This may in turn affect the fees you are required to pay or the availability of a place for you to study with us.</p> <p><strong>Non-EU domiciled students</strong> - If you are a non-EU domiciled student HESA may be requested to provide data about you to the United Kingdom's immigration authorities. These authorities may process your personal data in order to carry out their public functions connected with immigration.</p> <p><strong>Your HESA record will not be used to make decisions about you other than for those uses outlined under Purpose 2</strong><strong>. </strong></p> <p><strong>Purpose 3 - HESA publications</strong></p> <p>HESA uses the HESA Student Record to produce statistical publications. These include some <a href="http://web.archive.org/web/20230201065042/http://www.statistics.gov.uk/hub/what-are-national-statistics-">National Statistics</a> publications and online management information services.  HESA will take precautions to ensure that individuals are not identified from the data which are processed for Purpose 3.</p> <p><strong>Purpose 4 - Equal opportunity, research, journalism and other processing in which there is a legitimate interest</strong></p> <p>HESA and the other data controllers listed under Purpose 1 may also supply data to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:</p> <ul class="unIndentedList"> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students</li> </ul> <p>Users to whom data may be supplied for Purpose 4 include:</p> <ul class="unIndentedList"> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Data supplied by HESA to third parties is supplied under contracts which require that individuals shall not be identified from the supplied data. A copy of HESA’s current agreement for the supply of data is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/bds-details#e">www.hesa.ac.uk/bds-details#e</a>.</p> <p><strong>THE HESA INITIAL TEACHER TRAINING RECORD ("ITT") </strong></p> <p>If you are on an ITT course at a higher education provider in England, HESA will collect data about you and provide this to The National College for Teaching and Leadership.</p> <p>The National College for Teaching and Leadership is a data controller under the terms of the Data Protection Act 1998 and will process your personal data in order to carry out their public functions connected with teacher training in the UK.</p> <p><strong>ABOUT THE HESA STUDENT COLLECTION NOTICE</strong></p> <p>The HESA Student Collection Notice is regularly reviewed.  The most up to date version can be found at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>. Minor updates to the Student Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose or administrative use) will be made no more than once per year.</p> <p><strong>YOUR RIGHTS</strong></p> <p>Under the Data Protection Act 1998 you have rights of access to the data HESA holds about you. You will have to pay a small fee for this. For further information about the HESA Student Record please see <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a> or email <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#375356435619474558435254435e5859775f52445619565419425c"><span class="__cf_email__" data-cfemail="a7c3c6d3c689d7d5c8d3c2c4d3cec8c9e7cfc2d4c689c6c489d2cc">[email protected]</span></a></p> </div> </div> <div class="accordion-item"><a aria-controls="Student2012" aria-expanded="false" class="accordion-toggle" href="#Student2012" name="Student2012" role="button">12 Apr 2012 to 02 May 2013</a></p> <div class="accordion-content" id="Student2012"> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2012-13.pdf">HESA_Student_Collection_Notice_2012-13.pdf</a></p> <h3><a name="Student2012"></a>Student Collection Notice 2012-2013</h3> <p>Published 12 April 2012 - replaced with 2013-2014 version on 02 May 2013</p> <p><strong>STUDENT AND LEAVER SURVEYS</strong></p> <p>Your contact details may be passed to survey contractors to carry out the <a href="http://web.archive.org/web/20230201065042/http://www.thestudentsurvey.com/">National Student Survey</a> and surveys of student finances, on behalf of the organisations listed below under Purpose 1. These organisations and their contractors will use your details only for that purpose, and will then delete them.</p> <p>About six months after you graduate, we will contact you to ask you to fill in the Higher Education Statistics Agency (HESA) ‘Destinations of Leavers from HE' questionnaire. We will not give your contact details to HESA. You may also be included in a longitudinal survey of leavers a few years after you graduate. If so, we will pass your contact details to the organisation that has been contracted to carry out that survey. That organisation will use your details only for that purpose, and will then delete them.</p> <p>If you do not want to take part in these surveys, please let us know.</p> <p><strong>THE HESA STUDENT RECORD</strong></p> <p>We will send some of the information we hold about you to HESA. HESA collects, and is responsible for, the database in which your HESA student record is stored.  HESA uses this information in its own right, for example to publish statistics about students in higher education. HESA also processes information held in the database for other organisations. All uses of the HESA Student Record must comply with the Data Protection Act 1998.</p> <p>HESA is a registered charity and operates on a not-for-profit basis.  It may charge other organisations that it provides services and data to, in order to cover its costs.</p> <p><strong>Sensitive personal data</strong></p> <p>If you give us information about your disability status, ethnicity, sexual orientation, gender reassignment, pregnancy/maternity or religion these will be included in the HESA Student Record to assist with monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act. These fields will not be used by HESA in any way that could be used to identify you.</p> <p>The HESA Student Record is used for four broad purposes:</p> <p><strong>Purpose 1 - Public functions</strong></p> <p><strong>Education statistics and data </strong></p> <p>The HESA Student Record is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of the HESA Student Record under the terms of the Data Protection Act. Such organisations include:</p> <ul class="unIndentedList"> <li>Department for Business, Innovation and Skills</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for Employment and Learning, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Department for Education</li> <li>Research Councils</li> <li>Skills Funding Agency</li> <li>National College for Teaching and Leadership</li> <li>National Health Service (including Health Education England)</li> <li>General Medical Council</li> <li>Office For Fair Access</li> <li>Quality Assurance Agency for Higher Education</li> </ul> <p> </p> <p>and any successor bodies. These organisations may link information from the HESA Student Record with other information they hold. For example the Department for Education and the Department for Business Innovation and Skills link the HESA Student Record to the National Pupil Database. The linked data is used for understanding higher education and its impacts.</p> <p><strong>Other uses</strong></p> <p>The HESA Student Record may also be used by some organisations to help carry out public functions that are not connected with education. Such uses may include the following:</p> <ul class="unIndentedList"> <li>Measurement of population levels and migration by the Office for National Statistics, National Records of Scotland and the Northern Ireland Statistics and Research Agency</li> <li>Monitoring of public expenditure by the National Audit Office</li> <li>Monitoring of the accuracy of electoral registers by Electoral Registration Officials.</li> </ul> <p><strong>Purpose 2 - Administrative uses</strong></p> <p><strong>Previous Qualifications</strong> -If you are enrolled at an institution in England: We and the Higher Education Funding Council for England (HEFCE) may compare your data to educational records from previous years to help determine the levels of your current qualifications. This may in turn affect the fees you are required to pay or the availability of a place for you to study with us.</p> <p><strong>Non-EU domiciled students</strong> - If you are a non-EU domiciled student HESA may be requested to provide data about you to the United Kingdom's immigration authorities. These authorities may process your personal data in order to carry out their public functions connected with immigration.</p> <p><strong>Your HESA record will not be used to make decisions about you other than for those uses outlined under Purpose 2</strong><strong>. </strong></p> <p><strong>Purpose 3 - HESA publications</strong></p> <p>HESA uses the HESA Student Record to produce statistical publications. These include some National Statistics publications and online management information services.  HESA will take precautions to ensure that individuals are not identified from the data which are processed for Purpose 3.</p> <p><strong>Purpose 4 - Equal opportunity, research, journalism and other processing in which there is a legitimate interest</strong></p> <p>HESA and the other data controllers listed under Purpose 1 may also supply data to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:</p> <ul class="unIndentedList"> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students</li> </ul> <p>Users to whom data may be supplied for Purpose 4 include:</p> <ul class="unIndentedList"> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Data supplied by HESA to third parties is supplied under contracts which require that individuals shall not be identified from the supplied data. A copy of HESA's standard agreement for the supply of data is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/dox/informationprovision/IP5_Terms_and_conditions_V1_7.pdf">http://www.hesa.ac.uk/dox/informationprovision/IP5_Terms_and_conditions_V1_7.pdf<span class="filesize"> [134 KB]</span><span class="filesize"> [134 KB]</span></a></p> <p><strong>THE HESA INITIAL TEACHER TRAINING RECORD ("ITT") </strong></p> <p>If you are on an ITT course at an institution in England, HESA will collect data about you and provide this to the Teaching Agency.</p> <p>The Teaching Agency is a data controller under the terms of the Data Protection Act 1998 and will process your personal data in order to carry out their public functions connected with teacher training in the UK. </p> <p><strong>ABOUT THE HESA STUDENT COLLECTION NOTICE</strong></p> <p>The HESA Student Collection Notice is regularly reviewed.  The most up to date version can be found at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.  Minor updates to the Student Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose or administrative use) will be made no more than once per year.</p> <p><strong>YOUR RIGHTS</strong></p> <p>Under the Data Protection Act 1998, you have rights of access to the data HESA holds about you. You will have to pay a small fee for this. For further information about the HESA Student Record please see <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a> or email <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#42262336236c32302d362721362b2d2c022a2731236c23216c3729"><span class="__cf_email__" data-cfemail="4b2f2a3f2a653b39243f2e283f2224250b232e382a652a28653e20">[email protected]</span></a></p> </div> </div> <div class="accordion-item"><a aria-controls="Student2009" aria-expanded="false" class="accordion-toggle" href="#Student2009" name="Student2009" role="button">03 Nov 2009 to 12 Apr 2012</a></p> <div class="accordion-content" id="Student2009"> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2009-12.pdf">HESA_Student_Collection_Notice_2009-12.pdf</a></p> <h3><a name="Student2009"></a>Student Collection Notice 2009-2012</h3> <p>Published 3 November 2009 - replaced with 2012-2013 version on 12 April 2012</p> <p>We will send some of the information we hold about you to the Higher Education Statistics Agency (HESA). This information forms your HESA record, which does not include your contact details.</p> <p>Your contact details may be passed to survey contractors to carry out the National Student Survey and surveys of student finances, on behalf of the education organisations listed below. These organisations and their contractors will use your details only for that purpose, and will then delete them.</p> <p>About six months after you graduate, we will contact you to ask you to fill in the HESA ‘Destinations of Leavers from HE' questionnaire. We will not give your contact details to HESA. You might be included in a sample of leavers who are surveyed again a few years after they graduate. If so, we will pass your contact details to the organisation that has been contracted to carry out that survey. That organisation will use your details only for that purpose, and will then delete them.</p> <p>If you do not want to take part in these surveys, please let us know.</p> <p>The HESA record is used for three broad purposes:</p> <p>1.  Statutory functions</p> <p>The HESA record is used by the organisations listed below, or agents acting on their behalf, to carry out their public functions connected with education in the UK.</p> <ul class="unIndentedList"> <li>Department for Business, Innovation and Skills</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for Employment and Learning, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Department for Education</li> <li>Research Councils</li> <li>Skills Funding Agency</li> <li>National College for Teaching and Leadership</li> <li>National Health Service (including Health Education England)</li> <li>General Medical Council</li> <li>Office For Fair Access</li> <li>Quality Assurance Agency for Higher Education</li> </ul> <p> </p> <p>The HESA record may also be used by the Office for National Statistics and the National Audit Office to fulfil their statutory functions of measuring population levels and monitoring public expenditure.</p> <p>Equivalent and Lower Qualifications - This applies only to students enrolling at institutions in England: We and the Higher Education Funding Council for England may compare your data to educational records from previous years to help determine the levels of your current qualifications.  This may in turn affect the fees you are required to pay.</p> <p><strong>Your HESA record will not otherwise be used in any way that affects you personally.</strong></p> <p>2.  HESA publications</p> <p>HESA use the HESA record to produce anonymised data in annual statistical publications. These include some National Statistics publications and online management information services.</p> <p>3.  Research, equal opportunity, journalism, other legitimate interest/public function</p> <p>HESA will also supply anonymised data to third parties for the following purposes:</p> <ul class="unIndentedList"> <li>Equal opportunities monitoring - Your HESA record may contain details of your ethnic group and any disabilities you have. For students domiciled from Northern Ireland and attending an institution in Northern Ireland it may also contain information about religion. This data is only used where it is needed to promote or maintain equality of opportunity or treatment between persons of different racial or ethnic origins, religious beliefs or different states of physical or mental conditions</li> <li>Research. This may be academic research, commercial research or other statistical research into education where this is of benefit to the public interest.</li> <li>Journalism, where the relevant publication would be in the public interest e.g. league tables</li> </ul> <p>Anonymised data for the above purposes is supplied by HESA to the following types of user:</p> <ul class="unIndentedList"> <li>Local, regional and national government bodies who have an interest in higher education</li> <li>Higher education sector bodies</li> <li>Higher education institutions</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Journalists</li> </ul> <p>HESA will take precautions to ensure that individuals are not identified from the anonymised data which they process.</p> <p>Your rights</p> <p>Under the Data Protection Act 1998, you have rights of access to the data HESA holds about you. You will have to pay a small fee for this. For further information about the HESA record please see <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a> or email <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#dbbfbaafbaf5aba9b4afbeb8afb2b4b59bb3bea8baf5bab8f5aeb0" target="_self"><span class="__cf_email__" data-cfemail="f296938693dc82809d869791869b9d9cb29a978193dc9391dc8799">[email protected]</span></a></p> <p><a name="ITT In-Year Record Appendix"></a></p> <p><strong>For students on Initial Teacher Training courses at institutions in England only</strong>:</p> <p>If you are on an ITT course at an institution in England, HESA will also pass some or all of your HESA record to the General Teaching Council for England (GTC).</p> <p>GTC is a data controller under the terms of the Data Protection Act 1998. GTC will process your personal data in order to fulfil its remit and its statutory obligations, including the administration of provisional registration. Except where there is a legal obligation, GTC will not share your data with any third party, except those fulfilling a service on their behalf and under their expressed instructions. </p> </div> </div> <div class="accordion-item"><a aria-controls="StudentOlder" aria-expanded="false" class="accordion-toggle" href="#StudentOlder" name="StudentOlder" role="button">Older</a></p> <div class="accordion-content" id="StudentOlder"> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2008-09.pdf">HESA_Student_Collection_Notice_2008-09.pdf</a></p> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2004-08.pdf">HESA_Student_Collection_Notice_2004-08.pdf</a></p> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Student_Collection_Notice_2003-04.pdf">HESA_Student_Collection_Notice_2003-04.pdf</a></p> </div> </div> <h3><strong>Previous Staff Collection Notices</strong></h3> <div class="accordion-item"><a aria-controls="Staff2021" aria-expanded="false" class="accordion-toggle" href="#Staff2021" name="Staff2021" role="button">8 July 2021 to 6 June 2022</a></p> <div class="accordion-content" id="Staff2021"> <h2><a id="staff" name="staff"><strong>Staff collection notice 2021-2022</strong></a></h2> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Staff_collection_notice_2021-22.pdf">HESA_Staff_Collection_Notice_2021-22.pdf</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Hysbysiad_Casglu_i_Staff_HESA_2021-22.pdf">Hysbysiad_Casglu_i_Staff_HESA_2021-22.pdf</a></p> <p>The Higher Education Statistics Agency Limited (HESA) is the body responsible for collecting and disseminating information about higher education in the UK and the designated data body for England (see <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about">https://www.hesa.ac.uk/about</a> for more information). HESA is a <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/key-definitions/controllers-and-processors/" target="_blank">Controller</a> of your information.</p> <p>Reference to "your provider" refers to the higher education provider where you work. This notice relates to information about you which will be collected by your provider and passed to HESA and to other organisations as described below.</p> <p>This notice is applicable to the 2021/22 academic year. It is also applicable to data collected in previous academic years and retained by HESA. See <em>Categories of information submitted to HESA, including Special Categories of data</em>, below, for more information about the categories of data that will be collected in 2021/22 and that have been collected in previous years.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Review and Updates to this Notice</strong></p> </div> <p>This notice sets out information about HESA and other Controllers of your data, how and why they process your data, <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/" target="_blank">legal bases for this processing</a>, and <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/" target="_blank">your rights</a> under data protection legislation. This notice is regularly reviewed and updated, for example when organisations change their name, or to clarify how your information is used. Updates may be made at any time and you will always find the most up to date version at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Submission of your information to HESA</strong></p> <p>Data about you will be supplied to HESA for the purposes set out below. This data does not include your name (except in the limited case of purpose 6, see below) and is not intended to be used to make decisions about you. All information is used in compliance with data protection legislation.</p> </div> <p>Every year your provider will send some of the information it holds about you to HESA (“your HESA information”). HESA is an official source of data about UK higher education. HESA is a registered charity and operates on a not-for-profit basis.</p> <p><strong>Your HESA information does not contain your name or contact details</strong>, but may contain your Open Researcher and Contributor ID (<a href="http://web.archive.org/web/20230201065042/https://orcid.org/" target="_blank">ORCID.org</a>) number if you have one.</p> <p>Your HESA information is used for a variety of purposes by HESA and by third parties as described below. HESA may charge other organisations to whom it provides services and data. Uses of your HESA information may include linking parts of it to other information, as described below. Some information provided to HESA is retained indefinitely for statistical research purposes. Your HESA information will not be used to make automated decisions about you. The extent to which your HESA information will be used for purposes 3-4 and 7 will vary.</p> <p>HESA processes information about UK and other nationals, including EU nationals. Accordingly, all uses of HESA information must comply with the General Data Protection Regulation (including UK and EU versions) and the Data Protection Act 2018.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Categories of information submitted to HESA, including Special Categories of data</strong></p> <p>HESA collects data about the personal characteristics of staff at higher education providers and governors at higher education providers in addition to information about their jobs and contracts. This might include sensitive details about staff members’ and governors’ personal lives used for equality and diversity monitoring.</p> </div> <p>Data submitted to HESA by your provider includes details about your employment contract, the work that you do and your salary. It also includes <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/key-definitions/what-is-personal-data/" target="_blank">personal data</a>, such as your date of birth and your nationality.</p> <p>Information about your health, disability status, ethnicity, sexual orientation, gender reassignment or religion is classed as ‘<a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/special-category-data/" target="_blank">Special Categories of data</a>’ under the GDPR. If your provider discloses this information to HESA it will be included in your HESA information. This information is necessary for monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j). This information will also be processed for statistics and statistical research where this is necessary and in the public interest.</p> <p>A full list of data items that may be included in your HESA information for the 2021/22 academic year will be available from October 2021 here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c21025">www.hesa.ac.uk/collection/c21025</a>. Please note that not all data items are collected for all staff – the exact set of variables relating to you will depend on your role and contract.</p> <p>If you were a staff member in a previous academic year, a full list of data items that may be included in your HESA information can be found below. Please note that multiple academic years are likely to apply to your HESA information depending on the length of employment.</p> <p>If you need any assistance in identifying which record your HESA information may be included in, please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#72161306135c02001d061711061b1d1c321a1701135c13115c0719"><span class="__cf_email__" data-cfemail="43272237226d33312c372620372a2c2d032b2630226d22206d3628">[email protected]</span></a> for guidance.</p> <div class="table-responsive"> <table border="1" cellpadding="1" cellspacing="1"> <thead> <tr> <th scope="col" style="width: 300px;">Staff Record</th> <th scope="col" style="width: 450px;">Finance Record (see Purpose 6)</th> </tr> </thead> <tbody> <tr> <td style="width: 300px;"> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c20025">Staff 20/21</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c19025">Staff 19/20</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c18025">Staff 18/19</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c17025">Staff 17/18</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c16025">Staff 16/17</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c15025">Staff 15/16</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c14025">Staff 14/15</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c13025">Staff 13/14</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c12025">Staff 12/13</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c11025">Staff 11/12</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c10025">Staff 10/11</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c09025">Staff 09/10</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c08025">Staff 08/09</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c07025">Staff 07/08</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c06025">Staff 06/07</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c05025">Staff 05/06</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c04025">Staff 04/05</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c03025">Staff 03/04</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c02021">Staff 02/03</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c01021">Staff 01/02</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c00021">Staff 00/01</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c99021">Staff 99/00</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c98021">Staff 98/99</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c97021">Staff 97/98</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c96021">Staff 96/97</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c95021">Staff 95/96</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c94021">Staff 94/95</a></li> </ul> </td> <td style="width: 450px;"> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c19031">Finance 19/20</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c18031">Finance 18/19</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c17031">Finance 17/18</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c16031">Finance 16/17</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c15031">Finance 15/16</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c14031">Finance 14/15</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c13031">Finance & HE Business and Community Interaction 13/14</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c12031">Finance & HE Business and Community Interaction 12/13</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c11031">Finance & HE Business and Community Interaction 11/12</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c10031">Finance & HE Business and Community Interaction 10/11</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c09031">Finance & HE Business and Community Interaction 09/10</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c08031">Finance & HE Business and Community Interaction 08/09</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c07031">Finance 07/08</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c06031">Finance 06/07</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c05031">Finance 05/06</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c04031">Finance 04/05</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c03031">Finance 03/04</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c02031">Finance 02/03</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c01031">Finance 01/02</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c00031">Finance 00/01</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c99031">Finance 99/00</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c98031">Finance 98/99</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c97031">Finance 97/98</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c96031">Finance 96/97</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c95031">Finance 95/96</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c94031">Finance 94/95</a></li> </ul> </td> </tr> </tbody> </table> </div> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 1 – Individual level data used for public functions by the HE funding and regulatory bodies</strong></p> <p>Your HESA information is used by HE funding and regulatory bodies (who request HESA to collect it) for their statutory and/or public functions including funding, regulation and policy-making purposes. Your information will not be used to make decisions about you.</p> </div> <p>HESA shares your HESA information with the HE funding and regulatory body(s) who request HESA to collect it and require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the funding and regulatory bodies. HESA has been appointed as the designated data body for England under the <a href="http://web.archive.org/web/20230201065042/http://www.legislation.gov.uk/ukpga/2017/29/contents/enacted" target="_blank">Higher Education and Research Act 2017</a>. The HE funding and regulatory bodies are:</p> <ul> <li>England - <a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/privacy/" target="_blank">Office for Students</a> (who take into account what would be helpful to collect for sharing with UK Research and Innovation and the Secretary of State)</li> <li>Wales - <a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx" target="_blank">Higher Education Funding Council for Wales</a></li> <li>Scotland - <a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/about-sfc/how-we-operate/access-information/privacy-notice/privacy.aspx" target="_blank">Scottish Funding Council</a></li> <li>Northern Ireland - <a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice" target="_blank">Department for the Economy</a></li> </ul> <p>Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who work at higher education providers in the UK. These organisations are also Controllers of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice. However, all uses of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA.</p> <p>These organisations will not use the data for the purposes of identifying you as an individual or to make decisions about you. These organisations may retain HESA information indefinitely for statistical and research purposes.</p> <p><strong>Non-academic staff at higher education providers in England and Northern Ireland</strong></p> <p>If you are a non-academic staff member at a provider in England regulated by the Office for Students or at a higher education provider in Northern Ireland then the submission of your HESA information by your provider to HESA may not be required by the Office for Students or the Department for Economy (NI) as part of the HESA Staff Record and may be submitted by your provider on a voluntary basis in order to assist your provider in meeting its statutory reporting obligations (e.g. equality and diversity reporting, responding to FOIs) and for other legitimate interests such as benchmarking or internal reporting. If it is submitted on a voluntary basis then it may also be used for purposes 2 to 4 and 7.</p> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c19025/coverage">Click here for more information</a> on the categories of staff that are included in the Staff Record and the categories that will be collected on a voluntary basis.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 1</strong></p> <p>Legal basis for processing your information for Purpose 1 – these cover use of personal data by both HESA and the HE funding and regulatory bodies as data Controllers:</p> <p>Processing of your HESA information for Purpose 1 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing may also be necessary for compliance with a legal obligation to which the Controller may be subject (See GDPR Article 6(1)(c)).</p> <p>Processing of non-academic staff information may also be necessary for the purposes of the legitimate interests pursued by the Controller or by a third party (See GDPR Article 6(1)(f)).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act.</p> <p>Processing may also be necessary for compliance with a legal obligation to which the Controller may be subject (see GDPR Article 6(1)(c)).</p> <p>Processing of non-academic staff information may also be necessary for the purposes of the legitimate interests pursued by the Controller or by a third party (see GDPR Article 6(1)(f)).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (See GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 2 - Individual level data used for public functions by public authorities</strong></p> <p>HESA acts as an information hub to provide data and statistics on higher education. While the bodies described in Purpose 1 (above) have legal or regulatory power to require information from certain higher education providers, other public authorities also use your HESA information for their statutory and/or public functions including funding, regulation and policy-making purposes.</p> </div> <p><strong>Education statistics and data</strong></p> <p>HESA also acts as an information hub to provide information on higher education. In England, this is undertaken outside of HESA’s designated data body activities. HESA shares your HESA information with public authorities who require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the public authorities. Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who work at higher education providers in the UK.</p> <p>These organisations are also Controllers of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice.<br/> However, all uses that they make of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA. These organisations will not use the data for the purposes of identifying you as an individual or to take decisions about you. These organisations may retain HESA information indefinitely for statistical and research purposes, or for fixed terms depending on the terms of their data sharing agreements with HESA.</p> <p>The HE funding and regulatory bodies who receive information not collected under their relevant power but need it for their functions are:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/privacy/" target="_blank">Office for Students</a> (for example the Office for Students have power to collect information from providers in England, but also need information about providers in other parts of the UK for their public function)</li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx" target="_blank">Higher Education Funding Council for Wales</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/about-sfc/how-we-operate/access-information/privacy-notice/privacy.aspx" target="_blank">Scottish Funding Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice" target="_blank">Department for the Economy</a></li> </ul> <p>Education departments in England and the devolved administrations:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data" target="_blank">Department for Education</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://gov.wales/higher-education-statistics-agency-hesa-staff-data-collection" target="_blank">Welsh Government</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.gov.scot/Topics/Statistics/ScotXed/PrivacyInformation" target="_blank">Scottish Government</a></li> </ul> <p>Other bodies with public functions connected to education:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/department-for-business-energy-and-industrial-strategy/about/personal-information-charter" target="_blank">Department for Business, Energy and Industrial Strategy</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ukri.org/privacy-notice/" target="_blank">UK Research and Innovation (UKRI)</a></li> <li>National Health Service bodies and organisations working with them e.g. <a href="http://web.archive.org/web/20230201065042/https://hee.nhs.uk/about/privacy-notice" target="_blank">Health Education England</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.medschools.ac.uk/privacy-statement" target="_blank">Medical Schools Council</a></li> </ul> <p>and any successor bodies. Further Controllers may be added to the list from time to time – please see the online version of this notice at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>Your HESA information may also be used by other Controllers who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education such as monitoring of public expenditure by the National Audit Office.</p> <p>UKRI will link information about academic staff to <a href="http://web.archive.org/web/20230201065042/https://www.ref.ac.uk/" target="_blank">Research Excellence Framework</a> submissions in order to monitor equal opportunities in relation to that exercise, provide contextual information for that exercise, and gain assurance on the quality of data submitted to that exercise.</p> <p><strong>Other uses of data</strong><br/> Your HESA information may also be used by some organisations who are also Controllers who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education. Such uses may include the following:</p> <ul> <li>Production of statistics in relation to the population of the UK and for statistical research, undertaken by the Office for National Statistics. Further information can be found on the <a href="http://web.archive.org/web/20230201065042/https://www.ons.gov.uk/aboutus/transparencyandgovernance/dataprotection" target="_blank">ONS website</a>.</li> <li>Production of statistics and statistical research undertaken by <a href="http://web.archive.org/web/20230201065042/https://www.nrscotland.gov.uk/Privacy" target="_blank">National Records of Scotland</a> and the <a href="http://web.archive.org/web/20230201065042/https://www.nisra.gov.uk/nisra-privacy-notice" target="_blank">Northern Ireland Statistics and Research Agency</a>.</li> <li>Monitoring of public expenditure by the <a href="http://web.archive.org/web/20230201065042/https://www.nao.org.uk/privacy-policy-and-cookies-statement/" target="_blank">National Audit Office</a>.</li> </ul> <p>The above list of organisations who may receive your HESA information will be subject to change over time. For example, HESA is seeking to reduce the burden on higher education providers by encouraging other organisations who currently collect information directly from higher education providers to collect and receive information through HESA. The above list will be updated on the HESA website at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a> from time to  time, and you will need to monitor this link yourself if you wish to be aware of changes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 2</strong></p> <p>Processing of your HESA information for Purpose 2 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (See GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 3 - HESA publications</strong></p> <p>HESA publishes statistics about staff working in higher education.</p> </div> <p>Part of HESA’s role is to produce and publish information about higher education in the public interest. This includes Official and National Statistics publications (<a href="http://web.archive.org/web/20230201065042/https://uksa.statisticsauthority.gov.uk/about-the-authority/uk-statistical-system/types-of-official-statistics/" target="_blank">https://uksa.statisticsauthority.gov.uk/about-the-authority/uk-statistical-system/types-of-official-statistics/</a>) and online business intelligence and research services.</p> <p>When producing this material for publication, HESA applies its disclosure control, the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA Standard Rounding Methodology</a>, to ensure that no Personal Data is included and that individuals cannot be identified from published material.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 3</strong></p> <p>Processing of your HESA information for Purpose 3 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the Equality Act 2010 (See GDPR Article 9(2)(j)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 4 - Equal opportunity, research, journalism and other processing for statistical and research purposes</strong></p> <p>HESA information is used for research into higher education and the staff population. This research can be academic, commercial, journalistic or for personal reasons. HESA prohibits the identification of individual staff members by those carrying out this research.</p> </div> <p>HESA and the other Controllers (see Purposes 1 & 2) may also supply information to third parties where there is a legitimate interest in doing so for statistical and research purposes. Examples of use for this purpose include:</p> <ul> <li>Provision of information to students and prospective students</li> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Creation and operation of analysis tools, for example, <a href="http://web.archive.org/web/20230201065042/https://www.jisc.ac.uk/heidi-plus" target="_blank">Heidi Plus</a></li> </ul> <p>Users to whom information may be supplied for Purpose 4 include:</p> <ul> <li>Higher education sector bodies, including <a href="http://web.archive.org/web/20230201065042/http://www.jisc.ac.uk/analytics/jisc-and-hesa-data-protection" target="_blank">Jisc</a></li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties within Purpose 4 is supplied under contracts which require that individuals shall not be identified from the supplied information and this means that they also cannot use it to make decisions about you.</p> <p>A copy of HESA’s current agreement for the supply of tailored information is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">www.hesa.ac.uk/services/custom/data/timescales-costs</a>. Each agreement specifies the duration for which data may be processed. This is usually one year but may be longer, if necessary, for the specific research purpose. Each request for HESA information under Purpose 4 is assessed for its compliance with data protection legislation and its compatibility with this collection notice. HESA ensures that only the minimum amount of HESA information necessary for the specified research purpose is supplied to users. If the supplied information is to be published <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA's Rounding Methodology</a> or an equivalent disclosure control must be applied to ensure that individuals cannot be identified from the published material and it does not constitute Personal Data.</p> <p>A copy of HESA’s current agreement for access to Heidi Plus is <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Organisational Agreement for Access to Heidi Plus.pdf" target="_blank">available here</a>. Each agreement specifies the purpose for which the data may be processed.</p> <p>Other Controllers (listed under Purposes 1 & 2 above) may also process data for this purpose where this is necessary to fulfil their public functions.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 4 </strong></p> <p>Processing of your HESA information for Purpose 4 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)).</p> <p>Processing may also be necessary for the purposes of the legitimate interests of HESA in disseminating higher education information, or the legitimate interests of third parties in undertaking research in the field of higher education (See GDPR Article 6(1)(f)). In either case processing of your HESA information is necessary for statistical and research purposes in accordance with GDPR Article 89(1).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 5 - Clinical academic staff and health professionals only</strong></p> <p>If you work in a clinical or health-related role or department the Medical Schools Council may use your HESA information for additional purposes.</p> </div> <p>The <a href="http://web.archive.org/web/20230201065042/https://www.medschools.ac.uk/privacy-statement" target="_blank">Medical Schools Council</a> (MSC) and <a href="http://web.archive.org/web/20230201065042/https://www.universitiesuk.ac.uk/Pages/privacy-notice.aspx" target="_blank">Universities UK</a> through the activities of its Dental Schools Council (DSC) use HESA staff data for the purposes of:</p> <ul> <li>Monitoring trends in clinical academic staffing as a basis for partnership between the NHS and universities.</li> <li>Promoting, maintaining, and improving high quality education, research and clinical practice in the UK.</li> <li>Publishing results of research into clinical academic staffing at a detailed statistical level from which there may be a risk of identification of individuals through combinations of characteristics.</li> </ul> <p>The MSC and DSC retain each year’s detailed data for one year from receipt of data from HESA. Research results are held indefinitely for statistical and research purposes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 5</strong></p> <p>Processing of your HESA information for Purpose 5 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 6 - Senior staff pay and compensation for loss of office</strong></p> <p>If your salary exceeds £100,000 pa, or if you receive compensation for loss of office, information about your salary or compensation payments may be published by HESA and the funding and regulatory bodies listed in Purpose 1.</p> </div> <p>Accounts directions from the <a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/media/b846fd9c-211a-43ec-8e60-d14bb0ea31b1/ofs2018_26_amended.pdf" target="_blank">Office for Students</a>, the <a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/wp-content/uploads/2020/09/W18-19HE-Accounts-Direction-to-Higher-Education-Institutions-for-2017-18.pdf" target="_blank">Higher Education Funding Council for Wales</a>, the <a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/web/FILES/guidance_sfcgd112018/SFCGD112018_HE_Accounts_Direction_2017-18.pdf" target="_blank">Scottish Funding Council</a> and the Department for the Economy (NI) require higher education providers to publish the following details as part of their annual statements:</p> <ul> <li>Head of Provider name, salary and benefits,</li> <li>Numbers of staff paid over £100,000 per annum,</li> <li>The number of staff paid compensation for loss of office (‘severance pay’).</li> </ul> <p>This information is also collected by HESA in the HESA Finance record for higher education providers in Wales, Scotland and Northern Ireland. For higher education providers in England this information is collected by the Office for Students and shared with HESA who may use this information for all the purposes described in this notice.</p> <p>HESA publishes this information alongside other financial information about higher education providers as open data. The published data includes counts of staff which are not rounded or suppressed.</p> <p>Data about heads of providers is personal data, and where other numbers are small for a provider these may also reveal information about individuals.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing financial information about staff pay, compensation and benefits for purpose 6</strong></p> <p>Processing of your HESA information for Purpose 6 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 7 - Use by HESA to perform its role as designated data body for England and its equivalent roles for the other countries of the United Kingdom</strong></p> <p>Your HESA information is processed by HESA to collect, compile, publish and share data in accordance with this notice. This processing will include processing for purposes such as analysis & research to: review and improve data quality; data accuracy; and the usefulness; context & richness of the data/analysis HESA produces. It will also be processed to analyse and research the outcomes from education.</p> </div> <p>HESA processes your HESA information as part of a larger statistical dataset for the above purposes to:</p> <ul> <li>Create derived fields to enrich data utility and insights of HESA data.</li> <li>Contextualise the use of HESA data.</li> <li>Quality assure data and to remove anomalies and improve data accuracy.</li> <li>Research into data quality and the sector’s reliance on time series data.</li> <li>To review how changes and improvements can be made to HESA’s processing including systems and software and the implications that this would have on the data it produces.</li> </ul> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 7</strong></p> <p>Processing of your HESA information for Purpose 7 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (See GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Further information about recipients of your HESA information</strong></p> </div> <p>HESA publishes a register containing information relating to the recipients to whom we disclose data for statistical purposes. The live register can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/register">https://www.hesa.ac.uk/about/regulation/data-protection/register</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Your rights</strong></p> <p>Data protection legislation gives you rights over your personal data. These include rights to know what information is processed about you and how it is processed. These rights have to be met by HESA and any other organisation which takes decisions about how or why your information is processed.</p> </div> <p>You have the right to be informed about how your personal data is used. This Staff collection notice is regularly reviewed to ensure that it accurately describes how your HESA information is used. This notice may be updated from time to time, for example when new legislation is enacted, or when new policies are implemented by the public authorities listed under Purposes 1 & 2. The most up to date version can always be found at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>For further information about data protection, including contact details for HESA’s Data Protection Officer please see <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a>. If you have questions about how your HESA information is used, please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#87e3e6f3e6a9f7f5e8f3e2e4f3eee8e9c7efe2f4e6a9e6e4a9f2ec"><span class="__cf_email__" data-cfemail="385c594c5916484a574c5d5b4c51575678505d4b5916595b164d53">[email protected]</span></a>.</p> <p>Under the GDPR you have the right of access to your personal information and the right to rectify inaccurate information; the right to erasure; restrict processing; and object to processing. These rights are limited in certain circumstances by exemptions contained in the GDPR and the Data Protection Act 2018 where data is only processed for research or statistical purposes. If you think there is a problem with the way HESA is handling your data, you have the right to complain to the Information Commissioner's Office: <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/" target="_blank">ico.org.uk/</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Data transfers to other countries</strong></p> <p>Your HESA information may be transferred to countries outside the UK and the European Union for the purposes described above.</p> </div> <p>Your HESA information will only be transferred to countries whose data protection laws have been assessed as adequate, or where adequate safeguards are in place to protect your HESA information.</p> </div> </div> <div class="accordion-item"><a aria-controls="Staff2020" aria-expanded="false" class="accordion-toggle" href="#Staff2020" name="Staff2020" role="button">15 July 2020 to 8 July 2021</a></p> <div class="accordion-content" id="Staff2020"> <h2><a id="staff" name="staff"><strong>Staff collection notice 2020-2021</strong></a></h2> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Staff_Collection_Notice_2020-21.pdf">HESA_Staff_Collection_Notice_2020-21.pdf</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Hysbysiad_Casglu_i_Staff_HESA_2020-21.pdf">Hysbysiad_Casglu_i_Staff_HESA_2020-21.pdf</a></p> <p>The Higher Education Statistics Agency Limited (HESA) is the body responsible for collecting and disseminating information about higher education in the UK and the Designated Data Body for England (see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/about">www.hesa.ac.uk/about</a> for more information). HESA is a Controller of your information.</p> <p>Reference to "your provider" refers to the Higher Education Provider where you work. This notice relates to information about you which will be collected by your provider and passed to HESA and to other organisations as described below.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Review and Updates to this Notice</strong></p> </div> <p>This notice sets out information about HESA and other Controllers of your data, how and why they process your data, the legal bases for this processing, and your rights under data protection legislation. This notice is regularly reviewed and updated, for example when organisations change their name, or to clarify how your information is used. Updates may be made at any time and you will always find the most up to date version at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Submission of your information to HESA</strong></p> <p>Data about you will be supplied to HESA for the purposes set out below. This data does not include your name (except in the limited case of purpose 6, see below) and is not intended to be used to make decisions about you. All information is used in compliance with data protection legislation.</p> </div> <p>Every year your provider will send some of the information it holds about you to HESA (“your HESA information”). HESA is the official source of data about UK universities, higher education colleges, alternative Higher Education Providers, and recognised higher education courses taught at further education institutions in Wales. HESA is a registered charity and operates on a not-for-profit basis.</p> <p>Your HESA information does not contain your name or contact details, but may contain your Open Researcher and Contributor ID (<a href="http://web.archive.org/web/20230201065042/http://orcid.org/">ORCID.org</a>) number if you have one.</p> <p>Your HESA information is used for a variety of purposes by HESA and by third parties as described below. HESA may charge other organisations to whom it provides services and data. Uses of your HESA information may include linking parts of it to other information, as described below. Some information provided to HESA is retained indefinitely for statistical research purposes. Your HESA information will not be used to make automated decisions about you. The extent to which your information will be used for purposes 3-4 will vary.</p> <p>All uses of HESA information must comply with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Categories of information submitted to HESA, including Special Categories of data</strong></p> <p>HESA collects data about the personal characteristics of staff at Higher Education Providers and governors at Higher Education Providers in addition to information about their jobs and contracts. This might include sensitive details about staff members’ and governors’ personal lives used for equality and diversity monitoring.</p> </div> <p>Data submitted to HESA by your provider includes details about your employment contract, the work that you do and your salary. It also includes personal details about you such as your date of birth and your nationality.</p> <p>Information about your disability status, ethnicity, sexual orientation, gender reassignment or religion is classed as ‘Special Categories of data’ under the GDPR. If your provider discloses this information to HESA it will be included in your HESA information. This information is necessary for monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j). This information will also be processed for statistics and statistical research where this is necessary and in the public interest.</p> <p>A full list of data items that may be included in your HESA information for the 2020/21 academic year will be available from October 2020 here: <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/collection/c20025/">www.hesa.ac.uk/collection/c20025/</a>. Please note that not all data items are collected for all staff – the exact set of variables relating to you will depend on your role and contract.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 1 – Individual level data used for public functions by the HE funding and regulatory bodies</strong></p> <p>Your HESA information is used by HE funding and regulatory bodies (who request HESA to collect it) for their statutory and/or public functions including funding, regulation and policy-making purposes. Your information will not be used to make decisions about you.</p> </div> <p>HESA shares your HESA information with the HE funding and regulatory body(s) who request HESA to collect it and require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the public authorities. HESA has been appointed as the designated data body for England under the <a href="http://web.archive.org/web/20230201065042/http://www.legislation.gov.uk/ukpga/2017/29/contents/enacted">Higher Education and Research Act 2017</a>. The HE funding and regulatory bodies are:</p> <ul> <li>England - <a href="http://web.archive.org/web/20230201065042/http://www.officeforstudents.org.uk/privacy/">Office for Students</a> (who take into account what would be helpful to collect for sharing with UK Research and Innovation and the Secretary of State)</li> <li>Wales - <a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx">Higher Education Funding Council for Wales</a></li> <li>Scotland - <a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/about-sfc/how-we-operate/access-information/privacy-notice/privacy.aspx">Scottish Funding Council</a></li> <li>Northern Ireland - <a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice">Department for the Economy</a></li> </ul> <p>Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who work at Higher Education Providers in the UK. These organisations are also Controllers of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice. However, all uses of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA.</p> <p>These organisations will not use the data for the purposes of identifying you as an individual or to make decisions about you. These organisations may retain HESA information indefinitely for statistical and research purposes.</p> <p><strong>Non-academic staff at Higher Education Providers in England and Northern Ireland</strong></p> <p>If you are a non-academic staff member at a provider in England regulated by the Office for Students or at a Higher Education Provider in Northern Ireland then the submission of your HESA information by your provider to HESA may not be required by the Office for Students or the Department for Economy (NI) as part of the HESA Staff Record and may be submitted by your provider on a voluntary basis in order to assist your provider in meeting its statutory reporting obligations (e.g. equality and diversity reporting, responding to FOIs) and for other legitimate interests such as benchmarking or internal reporting. If it is submitted on a voluntary basis then it may also be used for purposes 2 to 4.</p> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c20025/coverage">Click here for more information</a> on the categories of staff that are included in the Staff Record and the categories that will be collected on a voluntary basis.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 1</strong></p> <p>Legal basis for processing your information for Purpose 1 – these cover use of personal data by both HESA and the HE funding and regulatory bodies as data Controllers:</p> <p>Processing of your HESA information for Purpose 1 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (see GDPR Article 6(1)(e)) and for statistical and research purposes (see GDPR Article 89).</p> <p>Processing may also be necessary for compliance with a legal obligation to which the Controller may be subject (see GDPR Article 6(1)(c)).</p> <p>Processing of non-academic staff information may also be necessary for the purposes of the legitimate interests pursued by the Controller or by a third party (see GDPR Article 6(1)(f)).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 2 - Individual level data used for public functions by public authorities</strong></p> <p>HESA acts as an information hub to provide data and statistics on higher education. While the bodies described in Purpose 1 (above) have legal or regulatory power to require information from certain Higher Education Providers, other public authorities also use your HESA information for their statutory and/or public functions including funding, regulation and policy-making purposes.</p> </div> <p><strong>Education statistics and data</strong></p> <p>HESA also acts as an information hub to provide information on higher education. In England, this is undertaken outside of HESA’s Designated Data Body activities. HESA shares your HESA information with public authorities who require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the public authorities. Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who work at Higher Education Providers in the UK.</p> <p>These organisations are also Controllers of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice. However, all uses that they make of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA. These organisations will not use the data for the purposes of identifying you as an individual or to take decisions about you. These organisations may retain HESA information indefinitely for statistical and research purposes, or for fixed terms depending on the terms of their data sharing agreements with HESA.</p> <p>The HE funding and regulatory bodies (in respect of information not collected under their relevant power – for example the Office for Students have power to collect information from providers in England, but also need information from providers in other parts of the UK) are:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/privacy/">Office for Students</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx">Higher Education Funding Council for Wales</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/about-sfc/how-we-operate/access-information/privacy-notice/privacy.aspx">Scottish Funding Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice">Department for the Economy</a></li> </ul> <p>Education departments in England and the devolved administrations:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data">Department for Education</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://beta.gov.wales/higher-education-statistics-agency-hesa-staff-data-collection">Welsh Government</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.gov.scot/Topics/Statistics/ScotXed/PrivacyInformation">Scottish Government</a></li> </ul> <p>Other bodies with public functions connected to education:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/department-for-business-energy-and-industrial-strategy/about/personal-information-charter">Department for Business, Energy and Industrial Strategy</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ukri.org/privacy-notice/">UK Research and Innovation</a> (UKRI)</li> <li>National Health Service bodies and organisations working with them e.g. <a href="http://web.archive.org/web/20230201065042/https://hee.nhs.uk/about/privacy-notice">Health Education England</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.medschools.ac.uk/privacy-statement">Medical Schools Council</a></li> </ul> <p>and any successor bodies. Further Controllers may be added to the list from time to time – please see the online version of this notice at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>Your HESA information may also be used by other Controllers who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education such as monitoring of public expenditure by the National Audit Office.</p> <p>UKRI will link information about academic staff to <a href="http://web.archive.org/web/20230201065042/http://www.ref.ac.uk/">Research Excellence Framework</a> submissions in order to monitor equal opportunities in relation to that exercise.</p> <p><strong>Other uses of data</strong></p> <p>Your HESA information may also be used by some organisations who are also Controllers who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education. Such uses may include the following:</p> <ul> <li>Production of statistics in relation to the population of the UK and for statistical research, undertaken by the Office for National Statistics. Further information can be found on the <a href="http://web.archive.org/web/20230201065042/https://www.ons.gov.uk/aboutus/transparencyandgovernance/dataprotection">ONS website</a>.</li> <li>Production of statistics and statistical research undertaken by <a href="http://web.archive.org/web/20230201065042/https://www.nrscotland.gov.uk/Privacy">National Records of Scotland</a> and the <a href="http://web.archive.org/web/20230201065042/https://www.nisra.gov.uk/nisra-privacy-notice">Northern Ireland Statistics and Research Agency</a>.</li> <li>Monitoring of public expenditure by the <a href="http://web.archive.org/web/20230201065042/https://www.nao.org.uk/privacy-policy-and-cookies-statement/">National Audit Office</a>.</li> </ul> <p>The above list of organisations who may receive your HESA information will be subject to change over time. For example, HESA is seeking to reduce the burden on Higher Education Providers by encouraging other organisations who currently collect information directly from Higher Education Providers to collect and receive information through HESA. The above list will be updated on the HESA website at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a> from time to time, and you will need to monitor this link yourself if you wish to be aware of changes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 2</strong></p> <p>Processing of your HESA information for Purpose 2 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 3 - HESA publications</strong></p> <p>HESA publishes statistics about staff working in higher education.</p> </div> <p>Part of HESA’s role is to produce and publish information about higher education in the public interest. This includes some National Statistics publications (<a href="http://web.archive.org/web/20230201065042/https://uksa.statisticsauthority.gov.uk/about-the-authority/uk-statistical-system/types-of-official-statistics/">https://uksa.statisticsauthority.gov.uk/about-the-authority/uk-statistical-system/types-of-official-statistics/</a>) and online business intelligence and research services.</p> <p>When producing this material for publication, HESA applies its disclosure control, the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA Standard Rounding Methodology</a>, to ensure that no Personal Data is included and that individuals cannot be identified from published material.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 3</strong></p> <p>Processing of your HESA information for Purpose 3 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the Equality Act 2010 (See GDPR Article 9(2)(j)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 4 - Equal opportunity, research, journalism and other processing for statistical and research purposes</strong></p> <p>HESA information is used for research into higher education and the staff population. This research can be academic, commercial, journalistic or for personal reasons. HESA prohibits the identification of individual staff members by those carrying out this research.</p> </div> <p>HESA and the other Controllers (see Purposes 1 & 2) may also supply information to third parties where there is a legitimate interest in doing so for statistical and research purposes. Examples of use for this purpose include:</p> <ul> <li>Provision of information to students and prospective students</li> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Benchmarking database, known as Heidi Plus</li> </ul> <p>Users to whom information may be supplied for Purpose 4 include:</p> <ul> <li>Higher education sector bodies</li> <li>Higher Education Providers</li> <li>Academic researchers and students</li> <li>Commercial organisations</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties within Purpose 4 is supplied under contracts which require that individuals shall not be identified from the supplied information and this means that they also cannot use it to take decisions about you.</p> <p>A copy of HESA’s current agreement for the supply of tailored information is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">www.hesa.ac.uk/services/custom/data/timescales-costs</a>. Each agreement specifies the duration for which data may be processed. This is usually one year but may be longer, if necessary, for the specific research purpose. Each request for HESA information under Purpose 4 is assessed for its compliance with data protection legislation and its compatibility with this Collection Notice. HESA ensures that only the minimum amount of HESA information necessary for the specified research purpose is supplied to users. If the supplied information is to be published <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA's Rounding Methodology</a> or an equivalent disclosure control must be applied to ensure that individuals cannot be identified from the published material and it does not constitute Personal Data.</p> <p>A copy of HESA’s current agreement for access to Heidi Plus is <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Organisational Agreement for Access to Heidi Plus.pdf">available here</a>. Each agreement specifies the purpose for which the data may be processed.</p> <p>For high-profile data requests under Purpose 4, HESA operates a <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/support/provider-preview">Provider Preview</a> service. If you have been nominated by your Higher Education Provider to preview data requests, or you have requested to be part of this process, HESA will process your personal information. This is done to approve your participation, facilitate the previews and for HESA to carry out regular reviews of the validity of authorised participants for each provider.</p> <p>Other Controllers (listed under Purposes 1 & 2 above) may also process data for this purpose where this is necessary to fulfil their public functions.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 4</strong></p> <p>Processing of your HESA information for Purpose 4 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)).</p> <p>Processing may also be necessary for the purposes of the legitimate interests of HESA in disseminating higher education information, or the legitimate interests of third parties in undertaking research in the field of higher education (See GDPR Article 6(1)(f)).</p> <p>In either case processing of your HESA information is necessary for statistical and research purposes in accordance with GDPR Article 89(1).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 5 - Clinical academic staff and health professionals only</strong></p> <p>If you work in a clinical or health-related role or department the Medical Schools Council may use your HESA information for additional purposes.</p> </div> <p>The <a href="http://web.archive.org/web/20230201065042/https://www.medschools.ac.uk/privacy-statement">Medical Schools Council</a> (MSC) and <a href="http://web.archive.org/web/20230201065042/https://www.universitiesuk.ac.uk/Pages/privacy-notice.aspx">Universities UK</a> through the activities of its Dental Schools Council (DSC) use HESA staff data for the purposes of:</p> <ul> <li>Monitoring trends in clinical academic staffing as a basis for partnership between the NHS and universities.</li> <li>Promoting, maintaining and improving high quality education, research and clinical practice in the UK.</li> <li>Publishing results of research into clinical academic staffing at a detailed statistical level from which there may be a risk of identification of individuals through combinations of characteristics.</li> </ul> <p>The MSC and DSC retain each year’s detailed data for one year from receipt of data from HESA. Research results are held indefinitely for statistical and research purposes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 5</strong></p> <p>Processing of your HESA information for Purpose 5 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 6 - Senior staff pay and compensation for loss of office</strong></p> <p>If your salary exceeds £100,000 pa, or if you receive compensation for loss of office, information about your salary or compensation payments may be published by HESA and the funding and regulatory bodies listed in Purpose 1.</p> </div> <p>Accounts directions from the <a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/media/b846fd9c-211a-43ec-8e60-d14bb0ea31b1/ofs2018_26_amended.pdf">Office for Students</a>, the <a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/wp-content/uploads/2020/09/W18-19HE-Accounts-Direction-to-Higher-Education-Institutions-for-2017-18.pdf">Higher Education Funding Council for Wales</a>, the <a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/web/FILES/guidance_sfcgd112018/SFCGD112018_HE_Accounts_Direction_2017-18.pdf">Scottish Funding Council</a> and the Department for the Economy (NI) require Higher Education Providers to publish the following details as part of their annual statements:</p> <ul> <li>Head of Provider name, salary and benefits,</li> <li>Numbers of staff paid over £100,000 per annum,</li> <li>The number of staff paid compensation for loss of office (‘severance pay’).</li> </ul> <p>This information is also collected by HESA in the HESA Finance record for Higher Education Providers in Wales, Scotland and Northern Ireland. For Higher Education Providers in England this information is collected by the Office for Students and shared with HESA who may use this information for all the purposes described in this notice.</p> <p>HESA publishes this information alongside other financial information about Higher Education Providers as open data. The published data includes counts of staff which are not rounded or suppressed.</p> <p>Data about heads of providers is personal data, and where other numbers are small for a provider these may also reveal information about individuals.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing financial information about staff pay, compensation and benefits for purpose 6.</strong></p> <p>Processing of your HESA information for Purpose 6 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Further information about recipients of your HESA information</strong></p> </div> <p>HESA publishes a register containing information relating to the recipients to whom we disclose data for statistical purposes. We do not provide names, contact details or unique identifiers to recipients covered by Purpose 4 of this Collection Notice.</p> <p>The live register can be found here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/register">https://www.hesa.ac.uk/about/regulation/data-protection/register</a></p> <p>The data provided may not be personal data as covered by the Data Protection Act 2018 and GDPR, however, we take a conservative view and treat it as personal data as there may be potential for a recipient to be able to identify individuals.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Your rights</strong></p> <p>Data protection legislation gives you rights over your personal data. These include rights to know what information is processed about you and how it is processed. These rights have to be met by HESA and any other organisation which takes decisions about how or why your information is processed.</p> </div> <p>You have the right to be informed about how your personal data is used. This HESA Staff Collection Notice is regularly reviewed to ensure that it accurately describes how your HESA information is used. This notice may be updated from time to time, for example when new legislation is enacted, or when new policies are implemented by the public authorities listed under Purposes 1 & 2. The most up to date version can always be found at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>For further information about data protection, including contact details for HESA’s Data Protection Officer please see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a>. If you have questions about how your HESA information is used, please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#83e7e2f7e2adf3f1ecf7e6e0f7eaecedc3ebe6f0e2ade2e0adf6e8"><span class="__cf_email__" data-cfemail="92f6f3e6f3bce2e0fde6f7f1e6fbfdfcd2faf7e1f3bcf3f1bce7f9">[email protected]</span></a>.</p> <p>Under the GDPR you have the right of access to your personal information and rights to rectify inaccurate information; restrict processing; and object to processing. These rights are limited in certain circumstances by the GDPR and the Data Protection Act 2018 where data is only processed for research or statistical purposes. If you think there is a problem with the way HESA is handling your data, you have the right to complain to the Information Commissioner's Office: <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/">ico.org.uk/</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Data transfers to other countries</strong></p> <p>Your HESA information may be transferred to countries outside the European Union for the purposes described above.</p> </div> <p>Your HESA information will only be transferred to countries whose data protection laws have been assessed as adequate by the European Commission, or where adequate safeguards, such as the EU-US Privacy Shield, are in place to protect your HESA information. European Commission decisions on the adequacy of the protection of personal data in third countries are published here: <a href="http://web.archive.org/web/20230201065042/http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm">ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm</a>.</p> </div> </div> <div class="accordion-item"><a aria-controls="Staff2019" aria-expanded="false" class="accordion-toggle" href="#Staff2019" name="Staff2019" role="button">17 July 2019 to 14 July 2020</a></p> <div class="accordion-content" id="Staff2019"> <h2><a id="staff" name="staff"><strong>Staff collection notice 2019-2020</strong></a></h2> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Staff_Collection_Notice_2019-20%20v2.9.pdf">HESA_Staff_Collection_Notice_2019-20.pdf</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Hysbysiad_Casglu_i_Staff_HESA_2019-20%20v1.1.pdf">Hysbysiad_Casglu_i_Staff_HESA_2019-20.pdf</a></p> <p>The Higher Education Statistics Agency Limited (HESA) is the body responsible for collecting and disseminating information about higher education in the UK and the Designated Data Body for England (see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/about">www.hesa.ac.uk/about</a> for more information). HESA is a Controller of your information. HESA’s wholly-owned subsidiary company HESA Services Limited acts as a Processor to do work on behalf of HESA and other organisations described in the notice below, but may also act as a Controller.</p> <p>Reference to "your provider" refers to the higher education provider where you work. This notice relates to information about you which will be collected by your provider and passed to HESA and to other organisations as described below. </p> <p>This notice sets out information about HESA and other controllers of your data, how and why they process your data, the legal bases for this processing, and your rights under data protection legislation. This notice is regularly reviewed and sometimes updated, for example when organisations change their name, or to clarify how your information is used. Updates may be made at any time and you will always find the most up to date version at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Submission of your information to HESA</strong></p> <p>Data about you will be supplied to HESA for the purposes set out below. This data does not include your name (except in the limited case of purpose 6, see below) and is not intended to be used to make decisions about you. All information is used in compliance with data protection legislation.</p> </div> <p>Every year your provider will send some of the information it holds about you to HESA (“your HESA information”). HESA is the official source of data about UK universities, higher education colleges, alternative HE providers, and recognised higher education courses taught at further education institutions in Wales. HESA is a registered charity and operates on a not-for-profit basis.</p> <p>Your HESA information does not contain your name (except in the limited case of purpose 6, see below) or contact details, but may contain your Open Researcher and Contributor ID (<a href="http://web.archive.org/web/20230201065042/http://orcid.org/">ORCID.org</a>) number if you have one.</p> <p>Your HESA information is used for a variety of purposes by HESA and by third parties as described below. HESA may charge other organisations to whom it provides services and data. Uses of your HESA information may include linking parts of it to other information, as described below. Some information provided to HESA is retained indefinitely for statistical research purposes. Your HESA information will not be used to make automated decisions about you. The extent to which your information will be used for purposes 3-4 will vary.</p> <p>All uses of HESA information must comply with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Categories of information submitted to HESA, including special categories of data</strong></p> <p>HESA collects data about the personal characteristics of staff and governors at higher education providers and information about their jobs and contracts. This might include sensitive details about staff members’ and governors’ personal lives used for equality and diversity monitoring.</p> </div> <p>Data submitted to HESA by your provider includes details about your employment contract, the work that you do and your salary. It also includes personal details about you such as your date of birth and your nationality.</p> <p>Information about your health, ethnicity, sexual orientation, gender reassignment or religion is classed as ‘Special categories of data’ under the GDPR. If your Provider discloses this information to HESA it will be included in your HESA information. This information is necessary for monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998. This information will also be processed for statistics and statistical research where this is necessary and in the public interest.</p> <p>A full list of data items that may be included in your HESA information for the 2019/20 academic year will be available from October 2019 here: <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/collection/c19025/">www.hesa.ac.uk/collection/c19025/</a>. Please note that not all data items are collected for all staff – the exact set of variables relating to you will depend on your role and contract.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 1 – Individual level data used for public functions by the HE funding and regulatory bodies</strong></p> <p>Your HESA information is used by HE funding and regulatory bodies (who request HESA to collect it) for their statutory and/or public functions including funding, regulation and policy-making purposes. Your information will not be used to make decisions about you.</p> </div> <p>HESA shares your HESA information with the HE funding and regulatory body(s) who require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the public authorities. The HE funding and regulatory bodies are:</p> <ul> <li>England - <a href="http://web.archive.org/web/20230201065042/http://www.officeforstudents.org.uk/privacy/">Office for Students</a></li> <li>Wales - <a href="http://web.archive.org/web/20230201065042/http://www.hefcw.ac.uk/home/hefcw_privacy.aspx">Higher Education Funding Council for Wales</a></li> <li>Scotland - <a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/about-sfc/how-we-operate/access-information/privacy-notice/privacy.aspx">Scottish Further and Higher Education Funding Council</a></li> <li>Northern Ireland - <a href="http://web.archive.org/web/20230201065042/http://www.economy-ni.gov.uk/dfe-privacy-notice">Department for the Economy</a></li> </ul> <p>Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who work at higher education providers in the UK. These organisations are also Controllers of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice. However, all uses that they make of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA.</p> <p>These organisations will not use the data for the purposes of identifying you as an individual or to make decisions about you. These organisations may retain HESA information indefinitely for statistical and research purposes.</p> <p><strong>Non-academic staff at Higher Education Providers in England and Northern Ireland</strong></p> <p>If you are a non-academic staff member at a provider in England regulated by the Office for Students or at a Higher Education Provider in Northern Ireland then the submission of your HESA information by your provider to HESA may not be required by the Office for Students or the Department for Economy (NI) as part of the HESA Staff Record and may be submitted by your provider on a voluntary basis in order to assist your provider in meeting its statutory reporting obligations (e.g. equality and diversity reporting, responding to FOIs) and for other legitimate interests such as benchmarking or internal reporting. If it is submitted on a voluntary basis then it may also be used for purposes 2 to 4.</p> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c19025/coverage">Click here for more information</a> on the categories of staff that are included in the Staff Record and the categories that will be collected on a voluntary basis.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 1</strong><br/> Legal basis for processing your information for Purpose 1 – these cover use of personal data by both HESA and the HE funding and regulatory bodies data controllers:</p> <p>Processing of your HESA information for Purpose 1 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (see GDPR Article 6(1)(e)) and for statistical and research purposes (see GDPR Article 89).</p> <p>Processing may also be necessary for compliance with a legal obligation to which the controller may be subject (see GDPR Article 6(1)(c)).</p> <p>Processing may also be necessary for the purposes of the legitimate interests of HESA in disseminating higher education information, or the legitimate interests of third parties in undertaking research in the field of higher education (See GDPR Article 6(1)(f)).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 2 - Individual level data used for public functions by public authorities</strong></p> <p>HESA acts as an information hub to provide data and statistics on higher education. While the bodies described in Purpose 1 (above) have legal or regulatory power to require information from certain HE providers, other public authorities also use your HESA information for their statutory and/or public functions including funding, regulation and policy-making purposes.</p> </div> <p><strong>Education statistics and data </strong></p> <p>The HE funding and regulatory bodies (in respect of information not collected under their relevant power – for example the Office for Students have power to collect information from English providers, but also need information from providers in other parts of the UK) are:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/privacy/">Office for Students</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx">Higher Education Funding Council for Wales</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/about-sfc/how-we-operate/access-information/privacy-notice/privacy.aspx">Scottish Further and Higher Education Funding Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice">Department for the Economy</a></li> </ul> <p>Education departments in England and the devolved administrations:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data">Department for Education</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://beta.gov.wales/higher-education-statistics-agency-hesa-staff-data-collection">Welsh Government</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.gov.scot/Topics/Statistics/ScotXed/PrivacyInformation">Scottish Government</a></li> </ul> <p>Other bodies with public functions connected to education:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/organisations/department-for-business-energy-and-industrial-strategy/about/personal-information-charter">Department for Business, Energy and Industrial Strategy</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ukri.org/privacy-notice/">UK Research and Innovation</a> (UKRI)</li> <li>National Health Service bodies and organisations working with them e.g. <a href="http://web.archive.org/web/20230201065042/https://hee.nhs.uk/about/privacy-notice">Health Education England</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.medschools.ac.uk/privacy-statement">Medical Schools Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.qaa.ac.uk/privacy-and-cookies">Quality Assurance Agency for Higher Education</a></li> </ul> <p>and any successor bodies. Further controllers may be added to the list from time to time – please see the online version of this notice at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>Your HESA information may also be used by other controllers who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education such as monitoring of public expenditure by the National Audit Office.</p> <p>UKRI will link information about academic staff to <a href="http://web.archive.org/web/20230201065042/http://www.ref.ac.uk/">Research Excellence Framework</a> submissions in order to monitor equal opportunities in relation to that exercise.</p> <p><strong>Other uses of data</strong></p> <p>Your HESA information may also be used by some organisations who are also controllers who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education. Such uses may include the following:</p> <ul> <li>Production of statistics in relation to the population of the UK and for statistical research, undertaken by the Office for National Statistics. Further information can be found on the <a href="http://web.archive.org/web/20230201065042/https://www.ons.gov.uk/aboutus/transparencyandgovernance/onsdatapolicies">ONS website</a>.</li> <li>Production of statistics and statistical research undertaken by <a href="http://web.archive.org/web/20230201065042/https://www.nrscotland.gov.uk/Privacy">National Records of Scotland</a> and the <a href="http://web.archive.org/web/20230201065042/https://www.nisra.gov.uk/nisra-privacy-notice">Northern Ireland Statistics and Research Agency</a>.</li> <li>Monitoring of public expenditure by the <a href="http://web.archive.org/web/20230201065042/https://www.nao.org.uk/privacy-policy-and-cookies-statement/">National Audit Office</a>.</li> </ul> <p>The above list of organisations who may receive your HESA information will be subject to change over time.  For example, HESA is seeking to reduce the burden on higher education providers by encouraging other organisations who currently collect information directly from higher education providers to collect and receive information through HESA. The above list will be updated on the HESA website at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a> from time to time, and you will need to monitor this link yourself if you wish to be aware of changes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 2</strong><br/> Processing of your HESA information for Purpose 2 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with GDPR Article 89(1) in accordance with the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, the Digital Economy Act 2017 or equivalent subsequent legislation, or for other research purposes falling within GDPR Article 9(2)(j).</p> <p>Processing of Special Categories of data may also be necessary for reasons of substantial public interest in accordance with the Equality Act 2010 or equivalent subsequent legislation (see GDPR Article 9(2)(g).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 3 - HESA publications</strong></p> <p>HESA publishes statistics about staff in higher education.</p> </div> <p>Part of HESA’s role is to produce and publish information about higher education in the public interest. This includes some National Statistics publications (<a href="http://web.archive.org/web/20230201065042/http://www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics">www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics</a>) and online business intelligence and research services. </p> <p>When producing this material for publication, HESA applies its disclosure control, the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA Standard Rounding Methodology</a>, to ensure that no Personal Data is included and that individuals cannot be identified from published material.</p> <p>Processing within this Purpose 3 may also be carried out by HESA Services Limited, HESA's wholly-owned subsidiary company.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 3</strong></p> <p>Processing of your HESA information for Purpose 3 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the Equality Act 2010 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 4 - Equal opportunity, research, journalism and other processing for statistical and research purposes</strong></p> <p>HESA information is used for research into higher education and the staff population. This research can be academic, commercial, journalistic or for personal reasons. HESA prohibits the identification of individual staff members by those carrying out this research.</p> </div> <p>HESA and the other controllers (see Purposes 1 & 2) may also supply information to third parties where there is a legitimate interest in doing so for statistical and research purposes. Examples of use for this purpose include:</p> <ul> <li>Provision of information to students and prospective students</li> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> </ul> <p>Users to whom information may be supplied for Purpose 4 include:</p> <ul> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties within Purpose 4 is supplied under contracts which require that individuals shall not be identified from the supplied information and this means that they also cannot use it to take decisions about you. A copy of HESA’s current agreement for the supply of information is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">www.hesa.ac.uk/services/custom/data/timescales-costs</a>. Each agreement specifies the duration for which data may be processed. This is usually one year but may be longer if necessary for the specific research purpose. Each request for HESA information under Purpose 4 is assessed for its compliance with data protection legislation and its compatibility with this Collection Notice. HESA ensures that only the minimum amount of HESA information necessary for the specified research purpose is supplied to users. If the supplied information is to be published <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA's Rounding Methodology</a> or an equivalent disclosure control must be applied to ensure that individuals cannot be identified from the published material and it does not constitute Personal Data.</p> <p>Other controllers (listed under Purposes 1 & 2 above) may also process data for this purpose where this is necessary to fulfil their public functions.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 4</strong></p> <p>Processing of your HESA information for Purpose 4 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)).</p> <p>Processing may also be necessary for the purposes of the legitimate interests of HESA in disseminating higher education information, or the legitimate interests of third parties in undertaking research in the field of higher education (See GDPR Article 6(1)(f)).</p> <p>In either case processing of your HESA information is necessary for statistical and research purposes in accordance with GDPR Article 89(1).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 5 - Clinical academic staff and health professionals only</strong></p> <p>If you work in a clinical or health-related role or department the Medical Schools Council may use your HESA information for additional purposes.</p> </div> <p>The Medical Schools Council (MSC) and Universities UK through the activities of its Dental Schools Council (DSC) use HESA staff data for the purposes of:</p> <ul> <li>Monitoring trends in clinical academic staffing as a basis for partnership between the NHS and universities.</li> <li>Promoting, maintaining and improving high quality education, research and clinical practice in the UK.</li> <li>Publishing results of research into clinical academic staffing at a detailed statistical level from which there may be a risk of identification of individuals through combinations of characteristics.</li> </ul> <p>The MSC and DSC retain each year’s detailed data for one year from receipt of data from HESA. Research results are held indefinitely for statistical and research purposes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 5</strong><br/> Processing of your HESA information for Purpose 5 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 6 - Senior staff pay and compensation for loss of office</strong></p> <p>If your salary exceeds £100,000 pa, or if you receive compensation for loss of office, information about your salary or compensation payments may be published by HESA and the funding and regulatory bodies listed in Purpose 1.</p> </div> <p>Accounts directions from the <a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/media/b846fd9c-211a-43ec-8e60-d14bb0ea31b1/ofs2018_26_amended.pdf" target="_blank">Office for Students</a>, the <a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/documents/publications/circulars/circulars_2018/W18%2019HE%20Accounts%20Direction%20to%20Higher%20Education%20Institutions%20for%202017-18.pdf" target="_blank">Higher Education Funding Council for Wales</a>, the <a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/web/FILES/guidance_sfcgd112018/SFCGD112018_HE_Accounts_Direction_2017-18.pdf" target="_blank">Scottish Funding Council</a> and the Department for the Economy (NI) require HE providers to publish the following details as part of their annual statements:</p> <ul> <li>Head of Provider name, salary and benefits,</li> <li>Numbers of staff paid over £100,000 per annum,</li> <li>The number of staff paid compensation for loss of office (‘severance pay’).</li> </ul> <p>This information is also collected by HESA in the HESA Finance record for HE providers in Wales, Scotland and Northern Ireland. For HE providers in England this information is collected by the Office for Students and shared with HESA who may use this information for all the purposes described in this notice.</p> <p>HESA publishes this information alongside other financial information about HE providers as open data. The published data includes counts of staff which are not rounded or suppressed.  </p> <p>Data about heads of providers is personal data, and where other numbers are small for a provider these may also reveal information about individuals.  </p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing financial information about staff pay, compensation and benefits.</strong></p> <p>Processing of your HESA information for Purpose 6 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Further information about recipients of your HESA information</strong></p> </div> <p>HESA is in the process of constructing a publishable register containing information relating to the recipients to whom we disclose data. Once live, the link to the register will be found in this section of the Collection Notice. </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Your rights</strong></p> <p>Data protection legislation gives you rights over your personal data. These include rights to know what information is processed about you and how it is processed. These rights have to be met by HESA and any other organisation which takes decisions about how or why your information is processed.</p> </div> <p>You have the right to be informed about how your personal data is used. This HESA Staff Collection Notice is regularly reviewed to ensure that it accurately describes how your HESA information is used. This notice may be updated from time to time, for example when new legislation is enacted, or when new policies are implemented by the public authorities listed under Purposes 1 & 2. The most up to date version can always be found at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>. </p> <p>For further information about data protection, including contact details for HESA <a name="_Hlk514425220">and HESA Services’ </a>Data Protection Officer please see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a><u>.</u> If you have questions about how your HESA information is used, please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#f094918491de80829f84959384999f9eb098958391de9193de859b"><span class="__cf_email__" data-cfemail="24404550450a54564b504147504d4b4a644c4157450a45470a514f">[email protected]</span></a>.</p> <p>Under the GDPR you have the right of access to your personal information and rights to rectify inaccurate information; restrict processing; and object to processing. These rights are limited in certain circumstances by the GDPR and Data Protection Act 2018 where data is only processed for research or statistical purposes. If you think there is a problem with the way HESA is handling your data, you have the right to complain to the Information Commissioner's Office: <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/">ico.org.uk/</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Data transfers to other countries</strong></p> <p>Your HESA information may be transferred to countries outside the European Union for the purposes described above.</p> </div> <p>Your HESA information will only be transferred to countries whose data protection laws have been assessed as adequate by the European Commission, or where adequate safeguards, such as the EU-US Privacy Shield, are in place to protect your HESA information. European Commission decisions on the adequacy of the protection of personal data in third countries are published here: <a href="http://web.archive.org/web/20230201065042/http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm">ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm</a>.</p> </div> </div> <div class="accordion-item"><a aria-controls="Staff2018" aria-expanded="false" class="accordion-toggle" href="#Staff2018" name="Staff2018" role="button">12 July 2018 to 16 July 2019</a></p> <div class="accordion-content" id="Staff2018"> <h2><a id="staff" name="staff"><strong>Staff collection notice 2018-2019</strong></a></h2> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Staff_Collection_Notice_2018-19_updated.pdf">HESA_Staff_Collection_Notice_2018-19_updated.pdf</a></p> <p>The Higher Education Statistics Agency Limited (HESA) is the body responsible for collecting and disseminating information about higher education in the UK and the Designated Data Body for England (<a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/about">www.hesa.ac.uk/about</a>). HESA is a Controller of your information. HESA’s wholly-owned subsidiary company HESA Services Limited acts as a Processor to do work on behalf of HESA and other organisations described in the notice below, but may also act as a Controller.</p> <p>Reference to "your provider" refers to the higher education provider where you work. This notice relates to information about you which will be collected by your provider and passed to HESA and to other organisations as described below. </p> <p>This notice sets out information about HESA and other controllers of your data, how and why they process your data, the legal bases for this processing, and your rights under data protection legislation. This notice is regularly reviewed and sometimes updated, for example when organisations change their name, or to clarify how your information is used. Updates may be made at any time and you will always find the most up to date version at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Submission of your information to HESA</strong></p> <p>Data about you will be supplied to HESA for the purposes set out below. This data does not include your name and is not intended to be used to make decisions about you. All information is used in compliance with data protection legislation.</p> </div> <p>Every year your provider will send some of the information it holds about you to HESA (“your HESA information”). HESA is the official source of data about UK universities, higher education colleges, alternative HE providers, and recognised higher education courses taught at further education institutions in Wales. HESA is a registered charity and operates on a not-for-profit basis.</p> <p>Your HESA information does not contain your name or contact details, but may contain your Open Researcher and Contributor ID (<a href="http://web.archive.org/web/20230201065042/http://orcid.org/">ORCID.org</a>) number if you have one</p> <p>Your HESA information is used for a variety of purposes by HESA and by third parties as described below. HESA may charge other organisations to whom it provides services and data. Uses of your HESA information may include linking parts of it to other information, as described below. Information provided to HESA is retained indefinitely for statistical research purposes. Your HESA information will not be used to make automated decisions about you.</p> <p>All uses of HESA information must comply with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Categories of information submitted to HESA, including special categories of data</strong></p> <p>HESA collects data about the personal characteristics of staff and governors at higher education providers and information about their jobs and contracts. This might include sensitive details about staff members’ and governors’ personal lives used for equality and diversity monitoring.</p> </div> <p>Data submitted to HESA by your provider includes details about your employment contract, the work that you do and your salary. It also includes personal details about you such as your date of birth and your nationality.</p> <p>Information about your disability status, ethnicity, sexual orientation, gender reassignment or religion is classed as ‘Special categories of data’ under the GDPR. If your Provider provides this information to HESA it will be included in your HESA information. This information is necessary for monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998. This information will also be processed for statistics and statistical research where this is necessary and in the public interest. Your sensitive information will be used for research purposes and will not be used to make decisions about you.</p> <p>A full list of data items that may be included in your HESA information for the 2018/19 academic year will be available from October 2018 here: <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/collection/c18025/">www.hesa.ac.uk/collection/c18025/</a>. Please note that not all data items are collected for all staff – the exact set of variables relating to you will depend on your role and contract.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 1 – Individual level data used for public functions</strong></p> <p>Your HESA information is used by public authorities for their statutory and/or public functions including funding, regulation and policy-making purposes. Your information will not be used to make decisions about you.</p> </div> <p><strong>Education statistics and data </strong></p> <p>HESA shares your HESA information with public authorities who require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the public authorities.  Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who work at higher education providers in the UK. </p> <p>These organisations are also controllers of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice.  However, all uses that they make of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA. These organisations will not use the data for the purposes of identifying you as an individual or to take decisions about you. These organisations may retain HESA information indefinitely for statistical and research purposes, or for fixed terms depending on the terms of their data sharing agreements with HESA. </p> <p>Such organisations may include:</p> <ul> <li><a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data">Department for Education</a></li> <li>Department for Business, Energy and Industrial Strategy</li> <li><a href="http://web.archive.org/web/20230201065042/https://beta.gov.wales/higher-education-statistics-agency-hesa-staff-data-collection">Welsh Government</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.gov.scot/Topics/Statistics/ScotXed/PrivacyInformation">Scottish Government</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.economy-ni.gov.uk/dfe-privacy-notice">Department for the Economy</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.officeforstudents.org.uk/privacy/">Office for Students</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.hefcw.ac.uk/home/hefcw_privacy.aspx">Higher Education Funding Council for Wales</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.sfc.ac.uk/home/privacy.aspx">Scottish Further and Higher Education Funding Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.ukri.org/privacy-notice/">UK Research and Innovation</a></li> <li>National Health Service bodies and organisations working with them e.g. <a href="http://web.archive.org/web/20230201065042/https://hee.nhs.uk/about/privacy-notice">Health Education England</a></li> <li><a href="http://web.archive.org/web/20230201065042/https://www.medschools.ac.uk/privacy-statement">Medical Schools Council</a></li> <li><a href="http://web.archive.org/web/20230201065042/http://www.qaa.ac.uk/privacy">Quality Assurance Agency for Higher Education</a></li> </ul> <p>and any successor bodies. Further controllers may be added to the list from time to time – please see the online version of this notice at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>Your HESA information may also be used by other controllers who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education such as monitoring of public expenditure by the National Audit Office.</p> <p>UKRI will link information about academic staff to <a href="http://web.archive.org/web/20230201065042/http://www.ref.ac.uk/">Research Excellence Framework</a> submissions in order to monitor equal opportunities in relation to that exercise.</p> <p>The above list of organisations who may receive your HESA information will be subject to change over time.  For example, HESA is seeking to reduce the burden on higher education providers by encouraging other organisations who currently collect information directly from higher education providers to collect and receive information through HESA. The above list will be updated on the HESA website at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a> from time to time, and you will need to monitor this link yourself if you wish to be aware of changes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 1</strong><br/> Processing of your HESA information for Purpose 1 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010, Section 75 of the Northern Ireland Act 1998, or the Digital Economy Act 2017 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 2 - HESA publications</strong></p> <p>HESA publishes statistics about staff in higher education.</p> </div> <p>Part of HESA’s role is to produce and publish information about higher education in the public interest. This includes some National Statistics publications (<a href="http://web.archive.org/web/20230201065042/http://www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics">www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics</a>) and online business intelligence and research services. </p> <p>When producing this material for publication, HESA applies its disclosure control, the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA Standard Rounding Methodology</a>, to ensure that no Personal Data is included and that individuals cannot be identified from published material.</p> <p>Processing within this Purpose 2 may also be carried out by HESA Services Limited, HESA's wholly-owned subsidiary company.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 2</strong><br/> Processing of your HESA information for Purpose 2 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the Equality Act 2010 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 3 - Equal opportunity, research, journalism and other processing for statistical and research purposes</strong></p> <p>HESA information is used for research into higher education and the staff population. This research can be academic, commercial, journalistic or for personal reasons. HESA prohibits the identification of individual staff members by those carrying out this research.</p> </div> <p>HESA and the other controllers (see Purpose 1) may also supply information to third parties where there is a legitimate interest in doing so for statistical and research purposes. Examples of use for this purpose include:</p> <ul> <li>Provision of information to students and prospective students</li> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> </ul> <p>Users to whom information may be supplied for Purpose 3 include:</p> <ul> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties within Purpose 3 is supplied under contracts which require that individuals shall not be identified from the supplied information and this means that they also cannot use it to take decisions about you. A copy of HESA’s current agreement for the supply of information is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">www.hesa.ac.uk/services/custom/data/timescales-costs</a>. Each agreement specifies the duration for which data may be processed. This is usually one year but may be longer if necessary for the specific research purpose. Each request for HESA information under Purpose 3 is assessed for its compliance with data protection legislation and its compatibility with this Collection Notice. HESA ensures that only the minimum amount of HESA information necessary for the specified research purpose is supplied to users. If the supplied information is to be published <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA's Rounding Methodology</a> or an equivalent disclosure control must be applied to ensure that individuals cannot be identified from the published material and it does not constitute Personal Data.</p> <p>Processing within this Purpose 3 is carried out by HESA and HESA Services Limited, HESA's wholly-owned subsidiary company.  Other controllers (listed under Purpose 1 above) may also process data for this purpose where this is necessary to fulfil their public functions.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 3</strong><br/> Processing of your HESA information for Purpose 3 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)).</p> <p>Processing may also be necessary for the purposes of the legitimate interests of HESA in disseminating higher education information, or the legitimate interests of third parties in undertaking research in the field of higher education (See GDPR Article 6(1)(f)).</p> <p>In either case processing of your HESA information is necessary for statistical and research purposes in accordance with GDPR Article 89(1).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 4 - Clinical academic staff and health professionals only</strong></p> <p>If you work in a clinical or health-related role or department the Medical Schools Council may use your HESA information for additional purposes.</p> </div> <p>The Medical Schools Council (MSC) and Universities UK through the activities of its Dental Schools Council (DSC) use HESA staff data for the purposes of:</p> <ul> <li>Monitoring trends in clinical academic staffing as a basis for partnership between the NHS and universities.</li> <li>Promoting, maintaining and improving high quality education, research and clinical practice in the UK.</li> <li>Publishing results of research into clinical academic staffing at a detailed statistical level from which there may be a risk of identification of individuals through combinations of characteristics.</li> </ul> <p>The MSC and DSC retain each year’s detailed data for one year from receipt of data from HESA. Research results are held indefinitely for statistical and research purposes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 4</strong><br/> Processing of your HESA information for Purpose 4 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 and Section 75 of the Northern Ireland Act 1998 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Senior staff pay and compensation for loss of office - updated March 2019</strong></p> <p>If your salary exceeds £100,000 pa, or if you receive compensation for loss of office, information about your salary or compensation payments may be published by HESA and the funding and regulatory bodies listed in Purpose 1.</p> </div> <p>Accounts directions from the Office for Students, the Higher Education Funding Council for Wales, the Scottish Funding Council and the Department for the Economy (NI) require HE providers to publish the following details as part of their annual statements:</p> <ul> <li>Head of Provider name, salary and benefits,</li> <li>Numbers of staff paid over £100,000 per annum,</li> <li>The number of staff paid compensation for loss of office (‘severance pay’).</li> </ul> <p>This information is also collected by HESA in the HESA Finance record. HESA publishes this information alongside other financial information about HE providers as open data. The published data includes counts of staff which are not rounded or suppressed.</p> <p>Data about heads of providers is personal data, and where other numbers are small for a provider these may also reveal information about individuals.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing financial information about staff pay, compensation and benefits.</strong><br/> Processing financial information about staff pay, compensation and benefits is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (See GDPR Article 6(1)(e)).</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Your rights</strong></p> <p>Data protection legislation gives you rights over your personal data. These include rights to know what information is processed about you and how it is processed. These rights have to be met by HESA and any other organisation which takes decisions about how or why your information is processed.</p> </div> <p>You have the right to be informed about how your personal data is used. This HESA Staff Collection Notice is regularly reviewed to ensure that it accurately describes how your HESA information is used.  This notice may be updated from time to time, for example when new legislation is enacted, or when new policies are implemented by the public authorities listed under Purpose 1. The most up to date version can always be found at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>. </p> <p>For further information about data protection, including contact details for HESA <a name="_Hlk514425220">and HESA Services’ </a>Data Protection Officer please see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a><u>.</u> If you have questions about how your HESA information is used, please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#64000510054a14160b100107100d0b0a240c0117054a05074a110f"><span class="__cf_email__" data-cfemail="afcbcedbce81dfddc0dbcaccdbc6c0c1efc7cadcce81cecc81dac4">[email protected]</span></a>.</p> <p>Under the GDPR you have the right of access to your personal information and rights to rectify inaccurate information; restrict processing; and object to processing. These rights are limited in certain circumstances by the GDPR and Data Protection Act 2018 where data is only processed for research or statistical purposes. If you think there is a problem with the way HESA is handling your data, you have the right to complain to the Information Commissioner's Office: <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/">ico.org.uk/</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Data transfers to other countries</strong></p> <p>Your HESA information may be transferred to countries outside the European Union for the purposes described above.</p> </div> <p>Your HESA information will only be transferred to countries whose data protection laws have been assessed as adequate by the European Commission, or where adequate safeguards, such as the EU-US Privacy Shield, are in place to protect your HESA information. European Commission decisions on the adequacy of the protection of personal data in third countries are published here: <a href="http://web.archive.org/web/20230201065042/http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm">ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm</a>.</p> </div> </div> <div class="accordion-item"><a aria-controls="Staff2017" aria-expanded="false" class="accordion-toggle" href="#Staff2017" name="Staff2017" role="button">31 July 2017 to 12 July 2018</a></p> <div class="accordion-content" id="Staff2017"> <h2><a id="staff" name="staff"><strong>Staff collection notice 2017-18</strong></a></h2> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/HESA_Staff_Collection_Notice_2017-18.pdf">HESA_Staff_Collection_Notice_2017-18.pdf</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Hysbysiad_Casglu_i_Staff_HESA_2017-18.pdf">Hysbysiad_Casglu_i_Staff_HESA_2017-18.pdf</a></p> <p><strong>Note:</strong> Reference in this notice to “we” and “us” refers to the Higher Education Statistics Agency Limited (<a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about">www.hesa.ac.uk/about</a>) and its wholly-owned subsidiary company HESA Services Limited. HESA is the official body responsible for collecting and disseminating information about higher education in the UK. Both HESA and HESA Services Ltd process personal data as ‘Data Controllers’. HESA Services Ltd also acts as a ‘Data Processor’ to do work on behalf of HESA and other organisations described in the notice below.</p> <p>Reference to "your provider" refers to the higher education provider where you work. This notice relates to information about you which will be collected by your provider and passed to HESA and to other organisations as described below.</p> <p>This notice is regularly reviewed and sometimes updated, for example when organisations change their name, or to clarify how your information is used. Updates may be made at any time and you will always find the most up to date version at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Submission of your information to HESA</strong></p> <p>Data about you will be supplied to HESA for the purposes set out below. This data does not include your name and is not intended to be used to make decisions about you. All information is used in compliance with the Data Protection Act 1998, and from 25 May 2018 with the General Data Protection Regulation (GDPR).</p> </div> <p>Every year your provider will send some of the information it holds about you to HESA (“your HESA information”). HESA is the official source of data about UK universities, higher education colleges, alternative HE providers, and recognised higher education courses taught at further education institutions in Wales. HESA is a registered charity and operates on a not-for-profit basis.</p> <p>Your HESA information does not contain your name or contact details, but may contain your Open Researcher and Contributor ID (<a href="http://web.archive.org/web/20230201065042/https://orcid.org/">ORCID.org</a>) number if you have one</p> <p>Your HESA information is used for a variety of purposes by HESA and by third parties as described below. HESA may charge other organisations to whom it provides services and data. Uses of your HESA information may include linking parts of it to other information, as described below. Information provided to HESA is retained indefinitely for statistical research purposes. Your HESA information will not be used to make automated decisions about you.</p> <p>All uses of HESA information must comply with the Data Protection Act 1998 (DPA): <a href="http://web.archive.org/web/20230201065042/http://www.legislation.gov.uk/ukpga/1998/29/contents">www.legislation.gov.uk/ukpga/1998/29/contents</a>. From 25 May 2018, the DPA will be replaced by the EU General Data Protection Regulation (GDPR): <a href="http://web.archive.org/web/20230201065042/http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN">eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN</a>. All uses of HESA information will comply with the GDPR from that date onwards.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Categories of information submitted to HESA, including special categories of data</strong></p> <p>HESA collects data about the personal characteristics of staff and governors at higher education providers and information about their jobs and contracts. This might include sensitive details about staff members’ and governors’ personal lives used for equality and diversity monitoring.</p> </div> <p>Data submitted to us by your provider includes details about your employment contract, the work that you do and your salary. It also includes personal details about you such as your date of birth and your nationality.</p> <p>Information about your disability status, ethnicity, sexual orientation, gender reassignment or religion is classed as ‘Sensitive personal data’ under the DPA, and ‘Special categories of data’ under the GDPR. If your Provider provides this information to us it will be included in your HESA information. This information is necessary for monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act 2010. Your sensitive information will be used for research purposes and will not be used to make decisions about you.</p> <p>A full list of data items that may be included in your HESA information for the 2017/18 academic year will be available from October 2017 here: <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection/c17025/">www.hesa.ac.uk/collection/c17025/</a>. Please note that not all data items are collected for all staff – the exact set of variables relating to you will depend on your role and contract.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 1 – Individual level data used for public functions</strong></p> <p>Your HESA information is used by public authorities for their statutory and/or public functions including funding, regulation and policy-making purposes. Your information will not be used to make decisions about you.</p> </div> <p>Education statistics and data HESA shares your HESA information with public authorities who require it to carry out their statutory and/or public functions. This data sharing is carried out in the public interest or in the exercise of official authority vested in HESA and the public authorities. Your HESA information will be shared with these organisations as part of a large dataset which contains similar information about other people who work at higher education providers in the UK.</p> <p>These organisations are data controllers in common of your HESA information. This means that they make their own decisions about how to use it, and this may include publishing statistics and sharing the information with third parties, such as other government or public bodies or other organisations of the type listed elsewhere in this collection notice. However, all uses that they make of your HESA information will be within the purposes set out in this collection notice and covered by data sharing agreements with HESA. These organisations will not use the data for the purposes of identifying you as an individual or to take decisions about you. These organisations may retain HESA information indefinitely for statistical and research purposes, or for fixed terms depending on the terms of their data sharing agreements with HESA.</p> <p>Such organisations may include:</p> <ul> <li>Department for Education</li> <li>Department for Business, Energy and Industrial Strategy</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for the Economy, Northern Ireland</li> <li>Office for Students (OfS)</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>UK Research and Innovation</li> <li>National Health Service bodies and organisations working with them e.g. Health Education England</li> <li>Medical Schools Council</li> <li>Quality Assurance Agency for Higher Education</li> </ul> <p>and any successor bodies. Further data controllers may be added to the list from time to time – please see the online version of this notice at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>Your HESA information may also be used by some organisations who are also data controllers in common who carry out statistical and research tasks in the public interest or in the exercise of official authority that are not connected with education such as monitoring of public expenditure by the National Audit Office.</p> <p>OfS will link information about academic staff to Research Excellence Framework submissions in order to monitor equal opportunities in relation to that exercise.</p> <p>The above list of organisations who may receive your HESA information will be subject to change over time. For example, HESA is seeking to reduce the burden on higher education providers by encouraging other organisations who currently collect information directly from higher education providers to collect and receive information through HESA. The above list will be updated on the HESA website at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a> from time to time, and you will need to monitor this link yourself if you wish to be aware of changes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 1</strong><br/> Processing of your HESA information for Purpose 1 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 2 - HESA publications</strong></p> <p>HESA publishes statistics about staff in higher education.</p> </div> <p>Part of HESA’s role is to produce and publish information about higher education in the public interest. This includes some National Statistics publications (<a href="http://web.archive.org/web/20230201065042/http://www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics">www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics</a>) and online business intelligence and research services.</p> <p>When producing this material for publication, HESA applies its disclosure control, the <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA Standard Rounding Methodology</a>, to ensure that no Personal Data is included and that individuals cannot be identified from published material.</p> <p>Processing within this Purpose 2 may also be carried out by HESA Services Limited, HESA's wholly-owned subsidiary company.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 2</strong><br/> Processing of your HESA information for Purpose 2 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the Equality Act 2010 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 3 - Equal opportunity, research, journalism and other processing for statistical and research purposes</strong></p> <p>HESA information is used for research into higher education and the staff population. This research can be academic, commercial, journalistic or for personal reasons. HESA prohibits the identification of individual staff members by those carrying out this research.</p> </div> <p>HESA and the other data controllers in common (see Purpose 1) may also supply information to third parties where there is a legitimate interest in doing so for statistical and research purposes. Examples of use for this purpose include:</p> <ul> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students</li> </ul> <p>Users to whom information may be supplied for Purpose 3 include:</p> <ul> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties within Purpose 3 is supplied under contracts which require that individuals shall not be identified from the supplied information and this means that they also cannot use it to take decisions about you. A copy of HESA’s current agreement for the supply of information is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">www.hesa.ac.uk/services/custom/data/timescales-costs</a>. Each agreement specifies the duration for which data may be processed. This is usually one year but may be longer if necessary for the specific research purpose. Each request for HESA information under Purpose 3 is assessed for its compliance with data protection legislation and its compatibility with this Collection Notice. HESA ensures that only the minimum amount of HESA information necessary for the specified research purpose is supplied to users. If the supplied information is to be published <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">HESA's Rounding Methodology</a> or an equivalent disclosure control must be applied to ensure that individuals cannot be identified from the published material and it does not constitute Personal Data.</p> <p>Processing within this Purpose 3 is carried out by HESA and HESA Services Limited, HESA's wholly-owned subsidiary company. Other data controllers (listed under Purpose 1 above) may also process data for this purpose where this is necessary to fulfil their public functions.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 3</strong><br/> Processing of your HESA information for Purpose 3 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)).</p> <p>Processing may also be necessary for the purposes of the legitimate interests of HESA in disseminating higher education information, or the legitimate interests of third parties in undertaking research in the field of higher education (See GDPR Article 6(1)(f)).</p> <p>In either case processing of your HESA information is necessary for statistical and research purposes in accordance with GDPR Article 89(1).</p> <p>Processing of Special Categories of personal data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Purpose 4 - Clinical academic staff and health professionals only</strong></p> <p>If you work in a clinical or health-related role or department the Medical Schools Council may use your HESA information for additional purposes.</p> </div> <p>The Medical Schools Council (MSC) and Universities UK through the activities of its Dental Schools Council (DSC) use HESA staff data for the purposes of:</p> <ul> <li>Monitoring trends in clinical academic staffing as a basis for partnership between the NHS and universities.</li> <li>Promoting, maintaining and improving high quality education, research and clinical practice in the UK.</li> <li>Publishing results of research into clinical academic staffing at a detailed statistical level from which there may be a risk of identification of individuals through combinations of characteristics.</li> </ul> <p>The MSC and DSC retain each year’s detailed data for one year from receipt of data from HESA. Research results are held indefinitely for statistical and research purposes.</p> <div style="padding: 2%; border: 1px solid black;"> <p><strong>Legal basis for processing your information for Purpose 4</strong><br/> Processing of your HESA information for Purpose 4 is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller (See GDPR Article 6(1)(e)) and for statistical and research purposes (See GDPR Article 89).</p> <p>Processing of Special Categories of data is necessary for statistical and research purposes in accordance with Article 89(1) based on the duties in the Equality Act 2010 (See GDPR Article 9(2)(j))</p> </div> <p> </p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Your rights</strong></p> <p>Data protection legislation gives you rights over your personal data. These include rights to know what information is processed about you and how it is processed. These rights have to be met by HESA and any other organisation which takes decisions about how or why your information is processed.</p> </div> <p>You have the right to be informed about how your personal data is used. This HESA Staff Collection Notice is regularly reviewed to ensure that it accurately describes how your HESA information is used. This notice may be updated from time to time, for example when new legislation is enacted, or when new policies are implemented by the public authorities listed under Purpose 1. The most up to date version can always be found at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.</p> <p>For further information about data protection and HESA’s data protection officer please see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a>. If you have questions about how your HESA information is used, please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#1c787d687d326c6e7368797f687573725c74796f7d327d7f326977"><span class="__cf_email__" data-cfemail="5a3e3b2e3b742a28352e3f392e3335341a323f293b743b39742f31">[email protected]</span></a>.</p> <p>Under the General Data Protection Regulation, you have the right of access to your personal information. You also have additional rights i.e. the right to rectify inaccurate information; restrict processing; and object to processing. These rights are limited in certain circumstances by the GDPR, and may be limited further by future UK legislation where data is only processed for research or statistical purposes. If you think there is a problem with the way HESA are handling your data, you have the right to complain to the Information Commissioner's Office: <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/">ico.org.uk</a>.</p> <div style="background-color: #dfe3eb; padding: 2%;"> <p><strong>Data transfers to other countries</strong></p> <p>Your HESA information may be transferred to countries outside the European Union for the purposes described above.</p> </div> <p>Your HESA information will only be transferred to countries whose data protection laws have been assessed as adequate by the European Commission, or where adequate safeguards, such as the EU-US Privacy Shield, are in place to protect your HESA information. European Commission decisions on the adequacy of the protection of personal data in third countries are published here: <a href="http://web.archive.org/web/20230201065042/http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm">ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm</a></p> </div> </div> <div class="accordion-item"><a aria-controls="Staff2016" aria-expanded="false" class="accordion-toggle" href="#Staff2016" name="Staff2016" role="button">29 June 2016 to 31 July 2017</a></p> <div class="accordion-content" id="Staff2016"> <h2><strong><a name="Staff2016"></a>Staff Collection Notice 2016-2017</strong></h2> <p><strong>Note: </strong>Reference in this notice to <strong>"we"</strong> and <strong>"us"</strong> refers to the higher education provider at which you are employed.</p> <h3><strong>Submission of your information to the Higher Education Statistics Agency (HESA)</strong></h3> <p>Every year, we send some of the information we hold about you to HESA (“your HESA information”). HESA is the official source of data about UK universities and higher education colleges. Your HESA information does not contain your name or contact details, but may contain your Open Researcher and Contributor ID (<a href="http://web.archive.org/web/20230201065042/http://orcid.org/">ORCID.org</a>) number if you have one. If you leave your current employment and move to another higher education provider we may pass your HESA Staff ID number to your new employer to enable research into employment in the higher education sector.</p> <p><strong>It is not intended to use your HESA information to make decisions about you. </strong></p> <p>HESA collects, and is responsible for, the database in which your HESA information is stored. HESA is a registered charity and operates on a not-for-profit basis. HESA uses your HESA information itself for its own purposes. HESA also shares information from your HESA information with third parties. It may charge other organisations to whom it provides services and data. HESA information is retained indefinitely by HESA for statistical research purposes. All uses of your HESA information must comply with the <a href="http://web.archive.org/web/20230201065042/http://www.legislation.gov.uk/ukpga/1998/29/contents" target="_blank">Data Protection Act 1998</a>.</p> <h3><strong>Sensitive information</strong></h3> <p>If you give us information about your disability status, ethnicity, sexual orientation, gender reassignment, parental leave or religion these may be included in your HESA information and used to assist with monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act. Your sensitive information will not be used to make decisions about you.</p> <h3><strong>Purposes for collecting your HESA information</strong></h3> <p>Your HESA information is used for four broad purposes:</p> <h4><strong>Purpose 1 - Public functions</strong></h4> <p>Your HESA information is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of your HESA information under the terms of the Data Protection Act (<a href="http://web.archive.org/web/20230201065042/http://ico.org.uk/for-organisations/guide-to-data-protection/key-definitions/" target="_blank">this link</a> explains what this means). Such organisations may include:</p> <ul class="ul"> <li>Department for Education</li> <li>Department for Business, Energy and Industrial Strategy</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for the Economy, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Research Councils</li> <li>Quality Assurance Agency for Higher Education</li> <li>National Health Service bodies and organisations working with them e.g. Health Education England</li> </ul> <p>and any successor bodies. These bodies may retain HESA information indefinitely for statistical research purposes, or for fixed terms depending on the terms of their data sharing agreements with HESA.</p> <p>Your HESA information may also be used by some organisations who are also data controllers in common to help carry out public functions that are not connected with education such as monitoring of public expenditure by the National Audit Office.</p> <p>HEFCE will link information about academic staff to Research Excellence Framework submissions in order to monitor equal opportunities in relation to that exercise.</p> <h4><strong>Purpose 2 - HESA publications</strong></h4> <p>HESA uses your HESA information to produce and publish information and statistics. This includes some <a href="http://web.archive.org/web/20230201065042/http://www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics" target="_blank">National Statistics publications</a> and online business intelligence and research services. HESA will take precautions to ensure that individuals are not identified from any information which is processed for Purpose 2.</p> <h4><strong>Purpose 3 - Equal opportunity, research, journalism and other processing in which there is a legitimate interest</strong></h4> <p>HESA and the other data controllers in common listed under Purpose 1 may also supply information to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:</p> <ul class="ul"> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students.</li> </ul> <p>Users to whom information may be supplied for Purpose 3 include:</p> <ul class="ul"> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists.</li> </ul> <p>Information supplied by HESA to third parties within Purpose 3 is supplied under contracts which require that individuals shall not be identified from the supplied information. A copy of HESA’s current agreement for the supply of information is available <a href="/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">here</a>.</p> <h4><strong>Purpose 4 – Clinical academic staff and health professionals only</strong></h4> <p>If you work in a clinical or health-related role or department the following organisations may use your HESA information for the additional purposes described below:</p> <p><strong>The Medical Schools Council and Universities UK through the activities of its Dental Schools Council</strong> – for the purposes of:</p> <ul class="ul"> <li>Monitoring trends in clinical academic staffing as a basis for partnership between the NHS and universities.</li> <li>Promoting, maintaining and improving high quality education, research and clinical practice in the UK.</li> <li>Publishing results of research into clinical academic staffing at a detailed statistical level from which there may be a risk of identification of individuals through combinations of characteristics.</li> </ul> <h3><strong>About the HESA Staff Collection Notice</strong></h3> <p>The HESA Staff Collection Notice is regularly reviewed. The most up to date version can be found here. Minor updates to the Staff Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose) will be made no more than once per year.</p> <h3><strong>Your rights</strong></h3> <p>For further information about data protection and your HESA information please see <a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection">here</a>. If you have questions about how your HESA information is used please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#7b1f1a0f1a550b09140f1e180f1214153b131e081a551a18550e10"><span class="__cf_email__" data-cfemail="7b1f1a0f1a550b09140f1e180f1214153b131e081a551a18550e10">[email protected]</span></a>. Under the Data Protection Act 1998 you have rights of access to the information HESA holds about you. You will have to pay a small fee for this. If you think there is a problem with the way HESA are handling your data you have the right to complain to the <a href="http://web.archive.org/web/20230201065042/http://ico.org.uk/" target="_blank">Information Commissioner's Office</a>.</p> </div> </div> <div class="accordion-item"><a aria-controls="Staff2015" aria-expanded="false" class="accordion-toggle" href="#Staff2015" name="Staff2015" role="button">05 June 2015 to 28 June 2016</a></p> <div class="accordion-content" id="Staff2015"> <h2><strong><a name="Staff2015"></a>Staff Collection Notice 2015-2016</strong></h2> <p><strong>Note: </strong>Reference in this notice to <strong>"we"</strong> and <strong>"us"</strong> refers to the higher education provider at which you are employed.</p> <p><a name="sf-record"></a><strong>The HESA Staff Record</strong></p> <p>Every year, we send some of the information we hold about you to the Higher Education Statistics Agency (HESA)<sup>[<a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/index.php?option=com_content&view=article&id=2459&limit=&start=#ftne1">1</a>]</sup>. HESA is the official source of data about UK universities and higher education colleges <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/">www.hesa.ac.uk</a>. Your HESA information does not contain your name or contact details, but may contain your Open Researcher and Contributor ID (<a href="http://web.archive.org/web/20230201065042/http://orcid.org/">ORCID.org</a>) number if you have one. If you leave your current employment and move to another higher education provider we may pass your HESA Staff ID number to your new employer to enable research into employment in the higher education sector.</p> <p><strong>It is not intended to use your HESA information to make decisions about you. </strong></p> <p>HESA collects, and is responsible for, the database in which your HESA information is stored. HESA is a registered charity and operates on a not-for-profit basis. HESA uses your HESA information itself for its own purposes. HESA also shares information from your HESA information with third parties. It may charge other organisations to whom it provides services and data. All uses of the HESA Record must comply with the Data Protection Act 1998 <a href="http://web.archive.org/web/20230201065042/http://www.legislation.gov.uk/ukpga/1998/29/contents">www.legislation.gov.uk/ukpga/1998/29/contents</a>.</p> <p><strong><a name="sf-sensitive"></a>Sensitive information</strong></p> <p>If you give us information about your disability status, ethnicity, sexual orientation, gender reassignment, parental leave or religion these may be included in the HESA information to assist with monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act. Your sensitive information will not be used to make decisions about you.</p> <p><strong>Purposes for collecting the HESA Staff Record</strong></p> <p>Your HESA information is used for four broad purposes:</p> <p><strong><a name="sf-p1"></a>Purpose 1 - Public functions</strong></p> <p>Your HESA information is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of your HESA information under the terms of the Data Protection Act (this link explains what this means <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/for-organisations/guide-to-data-protection/key-definitions/">ico.org.uk/for-organisations/guide-to-data-protection/key-definitions/</a>). Such organisations may include:</p> <ul> <li>Department for Business, Innovation and Skills</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for Employment and Learning, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Research Councils</li> <li>Department for Education</li> <li>Quality Assurance Agency for Higher Education</li> <li>National Health Service</li> </ul> <p>and any successor bodies. Your HESA information may also be used by some organisations who are also data controllers in common to help carry out public functions that are not connected with education such as monitoring of public expenditure by the National Audit Office.</p> <p>HEFCE will link information about academic staff to Research Excellence Framework submissions in order to monitor equal opportunities in relation to that exercise.</p> <p><strong><a name="sf-p2"></a>Purpose 2 - HESA publications</strong></p> <p>HESA uses your HESA information to produce and publish information and statistics. This includes some National Statistics publications (<a href="http://web.archive.org/web/20230201065042/http://www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics">www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics</a>) and online business intelligence and research services. HESA will take precautions to ensure that individuals are not identified from any information which is processed for Purpose 3.</p> <p><strong><a name="sf-p3"></a>Purpose 3 - Equal opportunity, research, journalism and other processing in which there is a legitimate interest</strong></p> <p>HESA and the other data controllers in common listed under Purpose 1 may also supply information to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:</p> <ul> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students</li> </ul> <p>Users to whom information may be supplied for Purpose 3 include:</p> <ul> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Information supplied by HESA to third parties within Purpose 4 is supplied under contracts which require that individuals shall not be identified from the supplied information. A copy of HESA’s current agreement for the supply of information is available at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/bds-details#e">www.hesa.ac.uk/bds-details#e</a>.</p> <p><strong><a name="sf-p4"></a>Purpose 4 –Clinical academic staff and health professionals only</strong></p> <p>If you work in a clinical or health-related role or department the following organisations may use your HESA information for the additional purposes described below:</p> <p><strong>The Medical Schools Council and Universities UK through the activities of its Dental Schools Council</strong> – for the purposes of:</p> <ul> <li>Monitoring trends in clinical academic staffing as a basis for partnership between the NHS and universities.</li> <li>Promoting, maintaining and improving high quality education, research and clinical practice in the UK.</li> <li>Publishing results of research into clinical academic staffing at a detailed statistical level from which there may be a risk of identification of individuals through combinations of characteristics.</li> </ul> <p><strong><a name="sf-update"></a>About the HESA Staff Collection Notice</strong></p> <p>The HESA Staff Collection Notice is regularly reviewed. The most up to date version can be found at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>. Minor updates to the Staff Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose) will be made no more than once per year.</p> <p><strong><a name="sf-rights"></a>Your rights</strong></p> <p>Under the Data Protection Act 1998, you have rights of access to the information HESA holds about you. You will have to pay a small fee for this. For further information about data protection and the HESA Staff Record please see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a> or email <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#8ce8edf8eda2fcfee3f8e9eff8e5e3e2cce4e9ffeda2edefa2f9e7"><span class="__cf_email__" data-cfemail="34505540551a44465b405157405d5b5a745c5147551a55571a415f">[email protected]</span></a>.</p> </div> </div> <div class="accordion-item"><a aria-controls="Staff2014" aria-expanded="false" class="accordion-toggle" href="#Staff2014" name="Staff2014" role="button">13 May 2014 to 05 June 2015</a></p> <div class="accordion-content" id="Staff2014"> <h2><strong><a name="Staff2014"></a>Staff Collection Notice 2014-2015</strong></h2> <p>Published 13 May 2014 - replaced with 2015/16 version on 05 June 2015</p> <p><strong>Note: </strong>Reference in this notice to <strong>"we"</strong> and <strong>"us"</strong> refers to the higher education provider at which you are employed.</p> <p><a name="sf-record"></a><strong>The HESA Staff Record</strong></p> <p>Every year, we send some of the information we hold about you to the Higher Education Statistics Agency (HESA)<a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/index.php?option=com_content&view=article&id=2459&limit=&start=#ftne1" name="ftnrefe1" style="background-color: #ffffff;" title="ftnrefe1">[1]</a> Your HESA Staff Record does not contain your name or contact details, but may contain your Open Researcher and Contributor ID (<a href="http://web.archive.org/web/20230201065042/http://orcid.org/" target="_self">ORCID.org</a>) number if you have one. If you leave your current employment and move to another higher education provider we may pass your HESA Staff ID number to your new employer to enable research into employment in the higher education sector.</p> <p><strong>It is not intended to use your HESA staff record to make decisions about you</strong>.</p> <p>HESA collects, and is responsible for, the database in which your HESA Staff Record is stored. HESA uses this information in its own right, for example to publish statistics about staff in higher education. All uses of the HESA Staff Record must comply with the Data Protection Act 1998.</p> <p>HESA is a registered charity and operates on a not-for-profit basis. It may charge other organisations to whom it provides services and data.</p> <p><a name="sf-sensitive"></a><strong>Sensitive information</strong></p> <p>If you give us information about your disability status, ethnicity, sexual orientation, gender reassignment, parental leave or religion these may be included in the HESA Staff Record to assist with monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act. Your sensitive information will not be used to make decisions about you.</p> <p><strong>Purposes for collecting the HESA Staff Record</strong></p> <p>The HESA Staff Record is used for four broad purposes:</p> <p><a name="sf-p1"></a><strong>Purpose 1 - Public functions</strong></p> <p>The HESA Staff Record is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of the HESA Staff Record under the terms of the Data Protection Act. Such organisations include:</p> <ul class="unIndentedList"> <li>Department for Business, Innovation and Skills</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for Employment and Learning, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Research Councils</li> <li>Department for Education</li> </ul> <p>and any successor bodies. The HESA Staff Record may also be used by some organisations to help carry out public functions that are not connected with education such as monitoring of public expenditure by the National Audit Office.</p> <p>HEFCE will link data about academic staff to Research Excellence Framework submissions in order to monitor equal opportunities in relation to that exercise.</p> <p><a name="sf-p2"></a><strong>Purpose 2 - HESA publications</strong></p> <p>HESA uses the HESA Staff Record to produce statistical publications. These include some <a href="http://web.archive.org/web/20230201065042/http://www.statistics.gov.uk/hub/what-are-national-statistics-">National Statistics</a> publications and online management information services.  HESA will take precautions to ensure that individuals are not identified from the data which they process for Purpose 2.</p> <p><a name="sf-p3"></a><strong>Purpose 3 - Equal opportunity, research, journalism and other processing in which there is a legitimate interest</strong></p> <p>HESA and the other data controllers listed under Purpose 1 may also supply data to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:</p> <ul class="unIndentedList"> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students</li> </ul> <p>Users to whom data may be supplied for Purpose 3 include:</p> <ul class="unIndentedList"> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Data supplied by HESA to third parties is supplied under contracts which require that individuals shall not be identified from the supplied data. A copy of HESA’s current agreement for the supply of data is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/bds-details#e">www.hesa.ac.uk/bds-details#e</a>.</p> <p><a name="sf-p4"></a><strong>Purpose 4 - Clinical academic staff and health professionals only</strong></p> <p>If you work in a clinical or health-related role or department the following organisations may use your HESA staff record for additional purposes:</p> <p><strong>The Medical Schools Council and Universities UK through the activities of its Dental Schools Council</strong> - Monitoring trends in clinical academic staffing as a basis for partnership between the NHS and universities. Promoting, maintaining and improving high quality education, research and clinical practice in the UK. Publishing results of research into clinical academic staffing at a detailed statistical level from which there may be a risk of identification of individuals through combinations of characteristics.</p> <p><a name="sf-update"></a><strong>About the HESA Staff Collection Notice</strong></p> <p>The HESA Staff Collection Notice is regularly reviewed. The most up to date version can be found at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>. Minor updates to the Staff Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose) will be made no more than once per year.</p> <p><a name="sf-rights"></a><strong>Your Rights</strong></p> <p>Under the Data Protection Act 1998, you have rights of access to the data HESA holds about you. You will have to pay a small fee for this. For further information about data protection and the HESA Staff Record please see <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/dataprot" target="_self">www.hesa.ac.uk/dataprot</a> or email <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#ec888d988dc29c9e8398898f98858382ac84899f8dc28d8fc29987" target="_self"><span class="__cf_email__" data-cfemail="660207120748161409120305120f0908260e03150748070548130d">[email protected]</span></a></p> </div> </div> <div class="accordion-item"><a aria-controls="Staff2013" aria-expanded="false" class="accordion-toggle" href="#Staff2013" name="Staff2013" role="button">02 May 2013 to 13 May 2014</a></p> <div class="accordion-content" id="Staff2013"> <h3><a name="Staff2013"></a>Staff Collection Notice 2013-2014</h3> <p>Published 02 May 2013 - replaced with 2014-2015 version on 13 May 2014</p> <p><a name="sf-record"></a><strong>The HESA Staff Record</strong></p> <p>Every year, we send some of the information we hold about you to the Higher Education Statistics Agency (HESA). This forms your HESA Staff Record which does not contain your name or contact details. If you leave your current employment and move to another higher education institution we may pass your HESA staff ID number to your new employer to enable research into employment in the higher education sector.</p> <p><strong>It is not intended to use your HESA staff record to make decisions about you</strong>.</p> <p>HESA collects, and is responsible for, the database in which your HESA Staff Record is stored. HESA uses this information in its own right, for example to publish statistics about staff in higher education. All uses of the HESA Staff Record must comply with the Data Protection Act 1998.</p> <p>HESA is a registered charity and operates on a not-for-profit basis. It may charge other organisations to whom it provides services and data.</p> <p><a name="sf-sensitive"></a><strong>Sensitive information</strong></p> <p>If you give us information about your disability status, ethnicity, sexual orientation, gender reassignment, parental leave or religion these may be included in the HESA Staff Record to assist with monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act. Your sensitive information will not be used to make decisions about you.</p> <p><strong>Purposes for collecting the HESA Staff Record</strong></p> <p>The HESA Staff Record is used for four broad purposes:</p> <p><a name="sf-p1"></a><strong>Purpose 1 - Public functions</strong></p> <p>The HESA Staff Record is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of the HESA Staff Record under the terms of the Data Protection Act. Such organisations include:</p> <ul class="unIndentedList"> <li>Department for Business, Innovation and Skills</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for Employment and Learning, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Research Councils</li> <li>Department for Education</li> </ul> <p>and any successor bodies. The HESA Staff Record may also be used by some organisations to help carry out public functions that are not connected with education such as monitoring of public expenditure by the National Audit Office.</p> <p>HEFCE will link data about academic staff to Research Excellence Framework submissions in order to monitor equal opportunities in relation to that exercise.</p> <p><a name="sf-p2"></a><strong>Purpose 2 - HESA publications</strong></p> <p>HESA uses the HESA Staff Record to produce statistical publications. These include some <a href="http://web.archive.org/web/20230201065042/http://www.statistics.gov.uk/hub/what-are-national-statistics-">National Statistics</a> publications and online management information services.  HESA will take precautions to ensure that individuals are not identified from the data which they process for Purpose 2.</p> <p><a name="sf-p3"></a><strong>Purpose 3 - Equal opportunity, research, journalism and other processing in which there is a legitimate interest</strong></p> <p>HESA and the other data controllers listed under Purpose 1 may also supply data to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:</p> <ul class="unIndentedList"> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students</li> </ul> <p>Users to whom data may be supplied for Purpose 3 include:</p> <ul class="unIndentedList"> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists</li> </ul> <p>Data supplied by HESA to third parties is supplied under contracts which require that individuals shall not be identified from the supplied data. A copy of HESA’s current agreement for the supply of data is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/bds-details#e">www.hesa.ac.uk/bds-details#e</a>.</p> <p><a name="sf-p4"></a><strong>Purpose 4 - Clinical academic staff and health professionals only</strong></p> <p>If you work in a clinical or health-related role or department the following organisations may use your HESA staff record for additional purposes:</p> <p><strong>Universities UK through the activities of its Medical Schools Council and Dental Schools Council</strong> - Monitoring trends in clinical academic staffing as a basis for partnership between the NHS and universities. Promoting, maintaining and improving high quality education, research and clinical practice in the UK.  Publishing results of research into clinical academic staffing at a detailed statistical level from which there may be a risk of identification of individuals through combinations of characteristics.</p> <p><a name="sf-update"></a><strong>About the HESA Staff Collection Notice</strong></p> <p>The HESA Staff Collection Notice is regularly reviewed. The most up to date version can be found at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>. Minor updates to the Staff Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose) will be made no more than once per year.</p> <p><a name="sf-rights"></a><strong>Your Rights</strong></p> <p>Under the Data Protection Act 1998, you have rights of access to the data HESA holds about you. You will have to pay a small fee for this. For further information about the HESA Staff Record please see <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/dataprot" target="_self">www.hesa.ac.uk/dataprot</a> or email <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#d4b0b5a0b5faa4a6bba0b1b7a0bdbbba94bcb1a7b5fab5b7faa1bf" target="_self"><span class="__cf_email__" data-cfemail="bbdfdacfda95cbc9d4cfded8cfd2d4d5fbd3dec8da95dad895ced0">[email protected]</span></a></p> </div> </div> <div class="accordion-item"><a aria-controls="Staff2012" aria-expanded="false" class="accordion-toggle" href="#Staff2012" name="Staff2012" role="button">12 Apr 2012 to 02 May 2013</a></p> <div class="accordion-content" id="Staff2012"> <h3><a name="Staff2012"></a>Staff Collection Notice 2012-2013</h3> <p>Published 12 April 2012 - replaced with 2013-2014 version on 02 May 2013</p> <p><strong>THE HESA STAFF RECORD</strong></p> <p>Every year, we send some of the information we hold about you to the Higher Education Statistics Agency (HESA). This forms your HESA Staff Record which does not contain your name or contact details.</p> <p><strong>It is not intended to use your HESA staff record to make decisions about you</strong>.</p> <p>HESA collects, and is responsible for, the database in which your HESA Staff Record is stored.  HESA uses this information in its own right, for example to publish statistics about staff in higher education.  HESA also processes information held in the database for other organisations. All uses of the HESA Staff Record must comply with the Data Protection Act 1998.</p> <p>HESA is a registered charity and operates on a not-for-profit basis.  It may charge other organisations that it provides services and data to, in order to cover its costs.</p> <p><strong>Sensitive personal data</strong></p> <p>If you give us information about your disability status, ethnicity, sexual orientation, gender reassignment, pregnancy/maternity or religion these will be included in the HESA Staff Record to assist with monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act. These fields will not be used by HESA in any way that could be used to identify you.</p> <p><strong>Purposes for collecting the HESA Staff Record</strong></p> <p>The HESA Staff Record is used for four broad purposes:</p> <p><strong>Purpose 1 - Public functions</strong></p> <p>The HESA Staff Record is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of the HESA Staff Record under the terms of the Data Protection Act.  Such organisations include:</p> <ul class="unIndentedList"> <li>Department for Business, Innovation and Skills</li> <li>Welsh Assembly Government</li> <li>Scottish Government</li> <li>Department for Employment and Learning, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>The Teaching Agency</li> <li>Research Councils</li> <li>Department for Children, Schools and Families</li> </ul> <p>and any successor bodies. The HESA Staff Record may also be used by some organisations to help carry out public functions that are not connected with education such as monitoring of public expenditure by the National Audit Office.</p> <p><strong>Purpose 2 - HESA publications</strong></p> <p>HESA uses the HESA Staff Record to produce statistical publications. These include some National Statistics publications and online management information services.  HESA will take precautions to ensure that individuals are not identified from the data which they process for Purpose 2.</p> <p><strong>Purpose 3 - Equal opportunity, research, journalism and other processing in which there is a public interest</strong></p> <p>HESA and the other data controllers listed under Purpose 1 may also supply data to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:</p> <ul class="unIndentedList"> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students</li> </ul> <p>Users to whom data may be supplied for Purpose 3 include:</p> <ul class="unIndentedList"> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local regional and national government bodies</li> <li>Journalists</li> </ul> <p>Data supplied by HESA to third parties is supplied under contracts which require that individuals shall not be identified from the supplied data. A copy of HESA's standard agreement for the supply of data is available at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/dox/informationprovision/IP5_Terms_and_conditions_V1_7.pdf">http://www.hesa.ac.uk/dox/informationprovision/IP5_Terms_and_conditions_V1_7.pdf<span class="filesize"> [134 KB]</span><span class="filesize"> [134 KB]</span></a></p> <p><strong>Purpose 4 -Clinical academic staff and health professionals only</strong></p> <p>If you work in a clinical or health-related role or department the following organisations may use your HESA staff record for additional purposes:</p> <p><strong>Universities UK through the activities of its Medical Schools Council and Dental Schools Council</strong> - Monitoring trends in clinical academic staffing as a basis for partnership between the NHS and universities. Promoting, maintaining and improving high quality education, research and clinical practice in the UK.  Publishing results of research into clinical academic staffing at a detailed statistical level from which there may be a risk of identification of individuals through combinations of characteristics.</p> <p><strong>ABOUT THE HESA STAFF COLLECTION NOTICE</strong></p> <p>The HESA Staff Collection Notice is regularly reviewed.  The most up to date version can be found at <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/fpn">www.hesa.ac.uk/fpn</a>.  Minor updates to the Staff Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose) will be made no more than once per year.</p> <p><strong>YOUR RIGHTS</strong></p> <p>Under the Data Protection Act 1998, you have rights of access to the data HESA holds about you. You will have to pay a small fee for this. For further information about the HESA Staff Record please see <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/dataprot" target="_self">www.hesa.ac.uk/dataprot</a> or email <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#24404550450a54564b504147504d4b4a644c4157450a45470a514f" target="_self"><span class="__cf_email__" data-cfemail="d8bcb9acb9f6a8aab7acbdbbacb1b7b698b0bdabb9f6b9bbf6adb3">[email protected]</span></a></p> </div> </div> <div class="accordion-item"><a aria-controls="Staff2009" aria-expanded="false" class="accordion-toggle" href="#Staff2009" name="Staff2009" role="button">03 Nov 2009 to 12 Apr 2012</a></p> <div class="accordion-content" id="Staff2009"> <h3><a name="Staff2009"></a>Staff Collection Notice 2009-2012</h3> <p>Published 3 November 2009 - replaced with 2012-2013 version on 12 April 2012</p> <p>Every year, we send some of the information we hold about you to the Higher Education Statistics Agency (HESA). This forms your HESA Staff Record which does not contain your name or contact details. <strong>Your HESA record will not be used in any way that affects you personally.</strong></p> <p>The HESA Staff Record used for three broad purposes:</p> <p>1.  Statutory functions</p> <p>The HESA record is used by the organisations listed below, or agents acting on their behalf, to carry out their public functions connected with education in the UK.</p> <ul class="unIndentedList"> <li>Department for Business, Innovation and Skills</li> <li>Welsh Assembly Government</li> <li>Scottish Government</li> <li>Department for Employment and Learning, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Training and Development Agency for Schools</li> <li>Research Councils</li> <li>Department for Education</li> </ul> <p>The HESA record may also be used by the Office for National Statistics and the National Audit Office to fulfil their statutory functions of measuring population levels and monitoring public expenditure.</p> <p>2.  HESA publications</p> <p>HESA use the HESA record to produce anonymised data in annual statistical publications. These include some National Statistics publications and online management information services.</p> <p>3.  Research, equal opportunity, journalism, other legitimate interest/public function</p> <p>HESA will also supply anonymised data to third parties for the following purposes:</p> <ul class="unIndentedList"> <li>Equal opportunities monitoring - Your HESA record may contain details of your ethnic group and any disabilities you have. This data is only used where it is needed to promote or maintain equality of opportunity or treatment between persons of different racial or ethnic origins, religious beliefs or different states of physical or mental conditions</li> <li>Research. This may be academic research, commercial research or other statistical research into higher education where this is of benefit to public interest.</li> <li>Journalism, where the relevant publication would be in the public interest e.g. league tables</li> </ul> <p>Anonymised data for the above purposes is supplied by HESA to the following types of user:</p> <ul class="unIndentedList"> <li>Local, regional and national government bodies who have an interest in higher education</li> <li>Higher education sector bodies</li> <li>Higher education institutions</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Journalists</li> </ul> <p>HESA will take precautions to ensure that individuals are not identified from the anonymised data which they process.</p> <p>Under the Data Protection Act 1998, you have rights of access to the data HESA holds about you. You may have to pay a small fee for this. Because the information HESA holds about you does not include your name and is a copy of the information we hold, you should contact us if you want to see the information. For further information about the HESA Staff Record please see <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a> or email <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#0b6f6a7f6a257b79647f6e687f6264654b636e786a256a68257e60" target="_self"><span class="__cf_email__" data-cfemail="71151005105f01031e05141205181e1f31191402105f10125f041a">[email protected]</span></a></p> </div> </div> <h3><strong><a id="graduate-outcomes" name="graduate-outcomes"></a>Previous Graduate Outcomes Privacy Information notices</strong></h3> <h4>For leavers from the 2019/20 academic year</h4> <p> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Graduate_Outcomes_Privacy_Information_2019-20_29-01-2021.pdf">Graduate Outcomes Privacy Information for 2019/20 graduates (updated 29 January 2021)</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Graduate_Outcomes_Privacy_Information_2019-20_11-01-2021.pdf">Graduate Outcomes Privacy Information for 2019/20 graduates (updated 11 January 2021)</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Graduate_Outcomes_Privacy_Information_2019-20_02_12_2020.pdf">Graduate Outcomes Privacy Information for 2019/20 graduates (updated 2 December 2020)</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Graduate_Outcomes_Privacy_Information_2019-20_04_11_2020.pdf">Graduate Outcomes Privacy Information for 2019/20 graduates</a></p> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Gwybodaeth_preifatrwydd_Hynt_Graddedigion_2019-20_diweddariad_29-01-2021.pdf">Gwybodaeth preifatrwydd Hynt Graddedigion 2019/20 (updated 29 January 2021)</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Gwybodaeth_preifatrwydd_Hynt_Graddedigion_2019-20_diweddariad_18-01-2021.pdf">Gwybodaeth preifatrwydd Hynt Graddedigion 2019/20 (updated 18 January 2021)</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Gwybodaeth_preifatrwydd_Hynt_Graddedigion_2019-20_diweddariad_02_12_2020.pdf">Gwybodaeth preifatrwydd Hynt Graddedigion 2019/20 (updated 2 December 2020)</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Gwybodaeth_preifatrwydd_Hynt_Graddedigion_2019-20_diweddariad_04_11_2020.pdf">Gwybodaeth preifatrwydd Hynt Graddedigion 2019/20</a></p> <h4>For leavers from the 2018/19 academic year</h4> <p> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Graduate_Outcomes_Privacy_Information_2018-19_01-02-2021.pdf">Graduate Outcomes Privacy Information for 2018/19 graduates (updated 1 February 2021)</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Graduate_Outcomes_Privacy_Information_2018-19_08-06-2020.pdf">Graduate Outcomes Privacy Information for 2018/19 graduates (updated 8 June 2020)</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Graduate_Outcomes_Privacy_Information_2018-19_18-03-2020.pdf">Graduate Outcomes Privacy Information for 2018/19 graduates</a></p> <p> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Gwybodaeth_preifatrwydd_Hynt_Graddedigion_2018-19_diweddariad_01-02-2021.pdf">Gwybodaeth preifatrwydd Hynt Graddedigion 2018/19 (updated 1 February 2021)</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Gwybodaeth_preifatrwydd_Hynt_Graddedigion_2018-19_diweddariad_08-06-2020.pdf">Gwybodaeth preifatrwydd Hynt Graddedigion 2018/19</a></p> <h4>For leavers from the 2017/18 academic year</h4> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Graduate_Outcomes_Privacy_Information_2017-18_update_01-02-2021.pdf">Graduate Outcomes Privacy Information for 2017/18 graduates (updated 1 February 2021)</a><br/> <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/files/Graduate_Outcomes_Privacy_Information_2017-18_update_2020-03-20.pdf">Graduate Outcomes Privacy Information for 2017/18 graduates (updated 20 March 2020)</a><br/> <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/files/Graduate_Outcomes_Privacy_Information_2017-18.pdf">Graduate Outcomes Privacy Information for 2017/18 graduates</a></p> <p><a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Gwybodaeth_preifatrwydd_Hynt_Graddedigion_2017-18_diweddariad_01-02-2021.pdf">Gwybodaeth preifatrwydd Hynt Graddedigion 2017/18 (diweddariad 1 February 2021)</a><br/> <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/files/Gwybodaeth_preifatrwydd_Hynt_Graddedigion_2017-18_diweddariad_2020-03-24.pdf">Gwybodaeth preifatrwydd Hynt Graddedigion 2017/18 (diweddariad 24 Mawrth 2020)</a><br/> <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/files/Gwybodaeth_preifatrwydd_Hynt_Graddedigion_2017-18.pdf">Gwybodaeth preifatrwydd Hynt Graddedigion 2017/18</a></p> <p><a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/files/Graduate_Outcomes_Privacy_Information_English_FECs_2017-18_update_2020-03-20.pdf">Graduate Outcomes Privacy Information for Graduates from English Further Education Colleges 2017/18 (updated 20 March 2020)</a><br/> <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/files/Graduate_Outcomes_Privacy_Information_English_FECs_2017-18.pdf">Graduate Outcomes Privacy Information for Graduates from English Further Education Colleges 2017/18</a></p> <h3><strong>Previous DLHE Collection Notices</strong></h3> <p>These can be found via the relevant year's <a href="http://web.archive.org/web/20230201065042/https://www.hesa.ac.uk/collection">data collection pages</a>, in the "Text for covering emails".</p> <h3><strong>Previous DLHE Longitudinal Collection Notices</strong></h3> <div class="accordion-item"><a aria-controls="LDLHE2010" aria-expanded="false" class="accordion-toggle" href="#LDLHE2010" name="LDLHE2010" role="button">For leavers who graduated between 1 Aug 2010 and 31 July 2011</a></p> <div class="accordion-content" id="LDLHE2010"> <h3><a name="LDLHE2010"></a>Destinations of Leavers from Higher Education Longitudinal survey (LDLHE) collection notice</h3> <p><strong>For leavers who graduated between 1 Aug 2010 and 31 July 2011 </strong></p> <p><strong>Note: </strong>Reference in this notice to <strong>"we"</strong> and <strong>"us"</strong> refers to IFF Research who conduct the Destinations of Leavers from Higher Education Longitudinal survey (LDLHE).</p> <h3><strong>Higher Education Statistics Agency (HESA)</strong></h3> <p>We will send information from this form to the Higher Education Statistics Agency (HESA).<sup>1</sup> This data will be linked to other information held about you as a student, including information you gave when you enrolled, and details of the qualification(s) you gained. HESA may link information we have provided to other related datasets such as UCAS, NSS, Individual Learner Record and Student Loan Company data and some linked data may be used to supplement the HESA Student Record. Information about the uses of this data is available in the Student Collection Notice <a href="http://web.archive.org/web/20230201065042/http://about/regulation/data-protection/notices#student">here</a>.</p> <p><strong>Your HESA record and survey responses will not be used in any way that could be used to make decisions about you.</strong></p> <p>HESA collects, and is responsible for, the database in which your HESA record is stored.  HESA uses this information in its own right, for example to publish statistics about leavers from higher education. All uses of the HESA record must comply with the Data Protection Act 1998. HESA is a registered charity and operates on a not-for-profit basis.  It may charge other organisations to whom it provides services and data.</p> <p>The HESA record, including Destinations of Leavers from Higher Education (DLHE) and LDLHE survey responses, is used for three broad purposes:</p> <h4><strong>Purpose 1 - Public functions </strong></h4> <p>The HESA record is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of the HESA record under the terms of the Data Protection Act.  Such organisations may include:</p> <ul class="ul" type="disc"> <li>Department for Business, Innovation and Skills</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for Employment and Learning, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Department for Education</li> <li>Research Councils</li> <li>The Data Service (on behalf of the Skills Funding Agency)</li> <li>The National College for Teaching and Leadership</li> <li>The National Health Service (including Health Education England)</li> <li>The General Medical Council</li> <li>Office For Fair Access.</li> </ul> <p>and any successor bodies. These organisations may link information from the HESA record with other information they hold. The HESA record may also be used by other organisations to help carry out public functions that are not connected with education. Such users include the Office for National Statistics and the National Audit Office.</p> <h4><strong>Purpose 2 - HESA publications </strong></h4> <p>The HESA record is used to produce statistical publications. These include some <a href="http://web.archive.org/web/20230201065042/http://www.statistics.gov.uk/hub/what-are-national-statistics" target="_blank">National Statistics publications</a> and online management information services. HESA will take precautions to ensure that individuals are not identified from the data which are processed for Purpose 2.</p> <h4><strong>Purpose 3 - Equal opportunity, research, journalism and other processing in which there is a legitimate interest</strong></h4> <p>HESA and the other data controllers listed under Purpose 1 may also supply data to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:</p> <ul class="ul"> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students.</li> </ul> <p>Users to whom data may be supplied for Purpose 3 include:</p> <ul class="ul"> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists.</li> </ul> <p>Data supplied by HESA to third parties is supplied under contracts which require that individuals shall not be identified from the supplied data. A copy of HESA's current agreement for the supply of data is available <a href="/web/20230201065042/https://www.hesa.ac.uk/services/custom/data/timescales-costs">here</a>. HESA data linked to the National Pupil Database and/or Individual Learner Record data held by DfE may be supplied by HESA through DfE to researchers.  A copy of the Agreement for the supply of linked data is available <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/collections/national-pupil-database" target="_blank">here</a>.</p> <h3><strong>About the HESA LDLHE Collection Notice</strong></h3> <p>The HESA LDLHE Collection Notice is regularly reviewed.  The most up to date version can be found here. Minor updates to the LDLHE Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose) will be made no more than once per year.</p> <h3><strong>Further contact</strong></h3> <p>You may be contacted as part of an audit to check that we have undertaken this survey properly.</p> <p>You may be included in further longitudinal surveys of leavers from higher education. If you do not want to take part in any of these surveys, please let your HE Provider know.<strong> </strong></p> <h3><strong>Your rights </strong></h3> <p>Under the Data Protection Act 1998 you have rights of access to the data HESA holds about you. You will have to pay a small fee for this. For further information about data protection and the HESA record please see <a href="/web/20230201065042/https://www.hesa.ac.uk/about/regulation/data-protection">here</a> or email <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#1e7a7f6a7f306e6c716a7b7d6a7771705e767b6d7f307f7d306b75" target="_self"><span class="__cf_email__" data-cfemail="395d584d5817494b564d5c5a4d50565779515c4a5817585a174c52">[email protected]</span></a> </p> <h3><strong>Your HE Provider</strong></h3> <p>If you authorise us to do so we will share your survey responses and/or contact details with the HE Provider you attended.</p> </div> </div> <div class="accordion-item"><a aria-controls="LDLHE2012" aria-expanded="false" class="accordion-toggle" href="#LDLHE2012" name="LDLHE2012" role="button">For leavers who graduated between 1 Aug 2012 and 31 July 2013</a></p> <div class="accordion-content" id="LDLHE2012"> <h3><a id="ldlhe2012" name="ldlhe2012">Destinations of Leavers from Higher Education Longitudinal survey (LDLHE) collection notice</a></h3> <p><strong>For leavers who graduated between 1 Aug 2012 and 31 July 2013</strong></p> <p><strong>Note: </strong>Reference in this notice to <strong>"we"</strong> and <strong>"us"</strong> refers to IFF Research who conduct the Destinations of Leavers from Higher Education Longitudinal survey (LDLHE).</p> <h3><strong>Higher Education Statistics Agency (HESA)</strong></h3> <p>We will send information from this survey to HESA. HESA is the official source of data about UK universities and higher education colleges <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/">www.hesa.ac.uk</a>. This survey information will be linked to other information held about you as a student, including information you gave when you enrolled, and details of the qualification you gained. Together this forms your HESA information. More details about HESA and about how your HESA information is used can be found in the Student Collection Notice at: <a href="http://web.archive.org/web/20230201065042/http://about/regulation/data-protection/notices#student">here</a>.</p> <p><strong>Your LDLHE survey responses will not be used to make decisions about you.</strong></p> <p>HESA collects, and is responsible for, the database in which your HESA information is stored. HESA is a registered charity and operates on a not-for-profit basis. HESA uses your HESA information, including the LDLHE survey responses, itself for its own purposes. HESA also shares information from your HESA information with third parties. It may charge other organisations to whom it provides services and data. HESA's use of your HESA information may include linking information from it to other data, as described further below. HESA information is retained indefinitely by HESA for statistical research purposes. All uses of HESA information must comply with the Data Protection Act 1998 <a href="http://web.archive.org/web/20230201065042/http://www.legislation.gov.uk/ukpga/1998/29/contents">www.legislation.gov.uk/ukpga/1998/29/contents</a>.</p> <p><strong>Purposes for collecting LDLHE survey responses</strong></p> <p>Your HESA information, including Destinations of Leavers from Higher Education (DLHE) and LDLHE survey responses, is used for three broad purposes:</p> <h4><strong>Purpose 1 - Public functions </strong></h4> <p>Your HESA information is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of your HESA information under the terms of the Data Protection Act (this link explains what this means <a href="http://web.archive.org/web/20230201065042/http://ico.org.uk/for-organisations/guide-to-data-protection/key-definitions/">ico.org.uk/for-organisations/guide-to-data-protection/key-definitions</a>). Such organisations may include:</p> <ul> <li>Your higher education provider</li> <li>Department for Education</li> <li>Department for Business, Energy and Industrial Strategy</li> <li>Welsh Government</li> <li>Scottish Government</li> <li>Department for the Economy, Northern Ireland</li> <li>Higher Education Funding Council for England</li> <li>Higher Education Funding Council for Wales</li> <li>Scottish Further and Higher Education Funding Council</li> <li>Research Councils</li> <li>Education Funding Agency</li> <li>Skills Funding Agency</li> <li>National College for Teaching and Leadership</li> <li>National Health Service bodies and organisations working with them e.g. Health Education England</li> <li>General Medical Council</li> <li>Office For Fair Access</li> <li>Quality Assurance Agency for Higher Education</li> </ul> <p>and any successor bodies. These bodies may retain HESA information indefinitely for statistical research purposes, or for fixed terms depending on the terms of their data sharing agreements with HESA.</p> <p>Your HESA information may also be used by other organisations who are also data controllers in common to help carry out public functions that are not connected with education. Such users include the Office for National Statistics and the National Audit Office who may use the information to fulfil their statutory functions of measuring population levels and monitoring public expenditure.</p> <p>The use of data under this Purpose 1, by HESA and other organisations, may include linking your HESA information to other data as described further below.</p> <h4><strong>Purpose 2 - HESA publications </strong></h4> <p>HESA uses your HESA information to produce and publish information and statistics. This includes some National Statistics publications (<a href="http://web.archive.org/web/20230201065042/http://www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics">www.statisticsauthority.gov.uk/national-statistician/types-of-official-statistics</a>) and online business intelligence and research services. HESA will take precautions to ensure that individuals are not identified from any information which is processed for Purpose 2.</p> <h4><strong>Purpose 3 - Equal opportunity, research, journalism and other processing in which there is a legitimate interest</strong></h4> <p>HESA and the other data controllers in common (see Purpose 1) may also supply information to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:</p> <ul> <li>Equal opportunities monitoring</li> <li>Research - This may be academic research, commercial research or other statistical research where this is in the public interest</li> <li>Journalism - Where the relevant publication would be in the public interest e.g. league tables</li> <li>Provision of information to students and prospective students.</li> </ul> <p>Users to whom data may be supplied for Purpose 3 include:</p> <ul> <li>Higher education sector bodies</li> <li>Higher education providers</li> <li>Academic researchers and students</li> <li>Commercial organisations (e.g. recruitment firms, housing providers, graduate employers)</li> <li>Unions</li> <li>Non-governmental organisations and charities</li> <li>Local, regional and national government bodies</li> <li>Journalists.</li> </ul> <p>Information supplied by HESA to third parties within Purpose 3 is supplied under contracts which require that individuals shall not be identified from the supplied information. A copy of HESA's current Agreement for the Supply of Information Services is available at <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/services/custom/data/timescales-costs#agreement">www.hesa.ac.uk/services/custom/data/timescales-costs#agreement</a>.</p> <p>HESA information may be linked to school and/or further education college information and supplied to researchers. A copy of the current Agreement for the supply of linked data about pupils from schools in England is available at <a href="http://web.archive.org/web/20230201065042/http://www.gov.uk/government/collections/national-pupil-database">www.gov.uk/government/collections/national-pupil-database</a>.</p> <p><strong>Linking of your HESA information to other information</strong></p> <p>As indicated above, where HESA and organisations covered by Purpose 1 above use HESA information this use may include linking HESA information to other information for example:</p> <ul> <li>UCAS data</li> <li>National Student Survey data</li> <li>School and Further Education data</li> <li>Student Loans Company data</li> <li>Qualification Awarding Bodies data</li> <li>Tax, Benefits, and Employment data. (Guidance on the use of HESA records matched to Tax, Benefits and Employment data is available at: <a href="http://web.archive.org/web/20230201065042/https://www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data">www.gov.uk/government/publications/longitudinal-education-outcomes-study-how-we-use-and-share-data</a>)</li> </ul> <p>Where HESA provides information from your HESA information to third parties under Purpose 3, the permitted uses of the information by a third party may include linking HESA information to other information held by the third party. Permission for such use is considered on a case by case basis. It is only given where the linking is for the purposes outlined in Purpose 3 and subject to the requirement not to carry out linking to identify individuals.</p> <p><strong>Further contact</strong></p> <p>You may be contacted as part of an audit to check that we have undertaken this survey properly.</p> <p>You may be included in further longitudinal surveys of leavers from higher education. If you do not want to take part in any of these surveys, please let your HE Provider know.</p> <p><strong>Your rights </strong></p> <p>For further information about data protection and your HESA information please see <a href="http://web.archive.org/web/20230201065042/http://www.hesa.ac.uk/dataprot">www.hesa.ac.uk/dataprot</a>. If you have questions about how your HESA information is used please contact <a href="/web/20230201065042/https://www.hesa.ac.uk/cdn-cgi/l/email-protection#a8ccc9dcc986d8dac7dccdcbdcc1c7c6e8c0cddbc986c9cb86ddc3"><span class="__cf_email__" data-cfemail="c5a1a4b1a4ebb5b7aab1a0a6b1acaaab85ada0b6a4eba4a6ebb0ae">[email protected]</span></a>. Under the Data Protection Act 1998 you have rights of access to the information HESA holds about you. You will have to pay a small fee for this. If you think there is a problem with the way HESA are handling your data you have the right to complain to the Information Commissioner's Office: <a href="http://web.archive.org/web/20230201065042/https://ico.org.uk/">ico.org.uk</a>.</p> <p><strong>Your HE Provider</strong></p> <p>If you authorise us to do so we will share your contact details with the HE Provider you attended.</p> </div> </div> <style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style> </div> <div class="content-aside | col-1/3 | col-reverse"> </div> </div> </div> </div> </div> <div class="cms-controls"> <ul class="action-links"></ul> </div> </div> </main> <footer role="contentinfo" class="footer-site"> <div class="banner"> <div class="wrap"> <div class="grid | grid-spaced | grid-2-cols"> <div> <div class="region region-footer-menu"> <div id="block-menu-menu-footer-menu" class="block block-menu"> <div class="content"> <ul class="menu"><li class="first leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about" title="">About us</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/working-here" title="">Working here and vacancies</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/innovation/data-futures" title="">Data Futures</a></li> <li class="last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/services/heidi-plus" title="">Heidi Plus</a></li> </ul> </div> </div> </div> </div> <div> <div class="region region-social-links-menu"> <div id="block-menu-menu-social-links-menu" class="block block-menu"> <div class="content"> <ul class="menu"><li class="first leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/contact" title="">Contact/find us</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/news" title="">Latest news and blogs</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/support" title="">Support materials</a></li> <li class="last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/services" title="">Data analytics</a></li> </ul> </div> </div> </div> </div> </div> <div class="grid grid-spaced grid-2-cols"> <div> <div class="footer-meta"> <div class="region region-legal-footer-menu"> <div id="block-menu-menu-legal-footer-menu" class="block block-menu"> <div class="content"> <ul class="menu"><li class="first leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website/site-map" title="">Site map</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website/terms" title="">Terms of use</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website/accessibility" title="">Accessibility</a></li> <li class="leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website/cookies" title="">Cookies</a></li> <li class="last leaf"><a href="/web/20230201065042/https://www.hesa.ac.uk/about/website/privacy" title="">Privacy</a></li> </ul> </div> </div> </div> </div> </div> <div> <div class="social"> <h4>Connect With Us:</h4> <a href="http://web.archive.org/web/20230201065042/https://twitter.com/ukhesa" class="follow-twitter"> <img src="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/img/icon-twitter.svg" alt="Twitter"> </a> <a href="http://web.archive.org/web/20230201065042/https://www.linkedin.com/company/higher-education-statistics-agency" class="follow-linkedin"> <img src="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/img/icon-linkedin.svg" alt="LinkedIn"> </a> </div> <figure class="footer-site__logos"> <a href="http://web.archive.org/web/20230201065042/https://www.jisc.ac.uk/"> <img src="/web/20230201065042im_/https://www.hesa.ac.uk/sites/all/themes/hesa/img/logo-jisc.png" alt="Part of Jisc"/> </a> </figure> </div> </div> </div> </div> </footer> <span class="footer-ident"></span> <script data-cfasync="false" src="/web/20230201065042js_/https://www.hesa.ac.uk/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script type="text/javascript" src="http://web.archive.org/web/20230201065042js_/https://ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js"></script> <script type="text/javascript" src="http://web.archive.org/web/20230201065042js_/https://www.hesa.ac.uk/files/js/js_DRszCILfNteakMtA9IaG5VfXMgclPUg36cL1gyTDqJk.js"></script> <script type="text/javascript" src="http://web.archive.org/web/20230201065042js_/https://www.hesa.ac.uk/files/js/js_llyw5VQhyqjUFjFU3io3JXNCJnPS-gHPikTyooRDQkA.js"></script> <script type="text/javascript" src="http://web.archive.org/web/20230201065042js_/https://www.hesa.ac.uk/files/js/js_kues2zzvQLidKOYpIlUW_RRunHMU5orRYqAyHv4H3zs.js"></script> <script type="text/javascript"> <![CDATA[//><!]]> </script> <script type="text/javascript"> <![CDATA[//><!]]> </script>  <script src="http://web.archive.org/web/20230201065042js_/https://use.typekit.net/qsa5zsm.js"></script> <script>try{Typekit.load({ async: true });}catch(e){}</script> <script type="text/javascript"> <![CDATA[//><!]]> </script> <script src="/web/20230201065042js_/https://www.hesa.ac.uk/sites/all/themes/hesa/js/plugins.min.js"></script> <script src="/web/20230201065042js_/https://www.hesa.ac.uk/sites/all/themes/hesa/js/app.min.js"></script> </body> </html>