Data protection

<!DOCTYPE html>     <html class="no-js" lang="en-GB"> <head><script type="text/javascript" src="/_static/js/bundle-playback.js?v=HxkREWBo" charset="utf-8"></script> <script type="text/javascript" src="/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("http://web.archive.org/web"); __wm.wombat("https://www.jisc.ac.uk:443/guides/data-protection","20230315160120","http://web.archive.org/","web","/_static/", "1678896080"); </script> <link rel="stylesheet" type="text/css" href="/_static/css/banner-styles.css?v=S1zqJCYt" /> <link rel="stylesheet" type="text/css" href="/_static/css/iconochive.css?v=3PDvdIFv" />  <title>Data protection | Jisc</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <script type="text/javascript">var jiscp = {"joid":"-1","name":"","sector":"","region":""};</script> <link rel="preconnect" href="//web.archive.org/web/20230315160120/https://cdn-eu.dynamicyield.com/"> <link rel="preconnect" href="//web.archive.org/web/20230315160120/https://st-eu.dynamicyield.com/"> <link rel="preconnect" href="//web.archive.org/web/20230315160120/https://rcom-eu.dynamicyield.com/"> <link rel="dns-prefetch" href="//web.archive.org/web/20230315160120/https://cdn-eu.dynamicyield.com/"> <link rel="dns-prefetch" href="//web.archive.org/web/20230315160120/https://st-eu.dynamicyield.com/"> <link rel="dns-prefetch" href="//web.archive.org/web/20230315160120/https://rcom-eu.dynamicyield.com/"> <script> var cookiestring = new RegExp("jisc_eprivacy" + '[^;]+').exec(document.cookie); var value = unescape(!!cookiestring ? cookiestring.toString().replace(/^[^=]+/, '').replace('=', '') : ''); if(value === "active-consent") { var script1 = document.createElement('script'); var script2 = document.createElement('script'); script1.src = "//web.archive.org/web/20230315160120/https://cdn-eu.dynamicyield.com/api/9877327/api_dynamic.js"; script2.src = "//web.archive.org/web/20230315160120/https://cdn-eu.dynamicyield.com/api/9877327/api_static.js"; document.getElementsByTagName('head')[0].appendChild(script1); document.getElementsByTagName('head')[0].appendChild(script2); } </script><script> var cookiestring = new RegExp("jisc_eprivacy" + '[^;]+').exec(document.cookie); var value = unescape(!!cookiestring ? cookiestring.toString().replace(/^[^=]+/, '').replace('=', '') : ''); if(value === "active-consent") { (function(h,o,t,j,a,r){ h.hj=h.hj||function(){(h.hj.q=h.hj.q||[]).push(arguments)}; h._hjSettings={hjid:2326029,hjsv:6}; a=o.getElementsByTagName('head')[0]; r=o.createElement('script');r.async=1; r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv; a.appendChild(r); })(window,document,'http://web.archive.org/web/20230315160120/https://static.hotjar.com/c/hotjar-','.js?sv='); } </script> <link rel="shortcut icon" href="http://web.archive.org/web/20230315160120im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/favicon.ico"/> <meta name="description" content="Advice on data protection law around how colleges, universities and other learning providers collect and use information"/> <meta name="keywords" content="quick guide, GDPR"/> <link rel="canonical" href="http://web.archive.org/web/20230315160120/https://www.jisc.ac.uk/guides/data-protection"/> <link rel="shortlink" href="http://web.archive.org/web/20230315160120/https://www.jisc.ac.uk/node/24060"/> <meta property="og:site_name" content="Jisc"/> <meta property="og:type" content="website"/> <meta property="og:url" content="http://web.archive.org/web/20230315160120/https://www.jisc.ac.uk/guides/data-protection"/> <meta property="og:title" content="Data protection"/> <meta property="og:image:url" content="https://www.jisc.ac.uk/sites/default/files/data-screen-card.png"/> <meta name="twitter:card" content="summary_large_image"/> <meta name="twitter:site" content="@jisc"/> <meta name="twitter:title" content="Data protection: using information about students"/> <meta name="twitter:url" content="http://web.archive.org/web/20230315160120im_/https://www.jisc.ac.uk/guides/data-protection"/> <meta name="twitter:description" content="Advice on data protection law around how colleges, universities and other learning providers collect and use information."/> <meta name="twitter:image" content="http://web.archive.org/web/20230315160120im_/https://www.jisc.ac.uk/sites/default/files/data-screen-card.png"/> <link rel="alternate" type="application/rss+xml" title="Jisc blog feed" href="http://web.archive.org/web/20230315160120/https://feeds.feedburner.com/JISCBlog"/> <link rel="alternate" type="application/rss+xml" title="Jisc news feed" href="http://web.archive.org/web/20230315160120/https://feeds2.feedburner.com/ac/uabG"/> <link rel="alternate" type="application/rss+xml" title="Jisc events feed" href="http://web.archive.org/web/20230315160120/https://feeds2.feedburner.com/ac/toXU"/> <link rel="alternate" type="application/rss+xml" title="Jisc jobs feed" href="http://web.archive.org/web/20230315160120/https://feeds.feedburner.com/JiscJobVacanciesWebFeed"/> <link rel="alternate" type="application/rss+xml" title="Jisc podcasts feed" href="http://web.archive.org/web/20230315160120/https://feeds.feedburner.com/JiscPodcast"/> <link rel="apple-touch-icon" sizes="144x144" href="http://web.archive.org/web/20230315160120im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/apple-touch-icon-144x144-precomposed.png"> <link rel="apple-touch-icon" sizes="114x114" href="http://web.archive.org/web/20230315160120im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/apple-touch-icon-114x114-precomposed.png"> <link rel="apple-touch-icon" sizes="57x57" href="http://web.archive.org/web/20230315160120im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/apple-touch-icon-57x57-precomposed.png"> <link rel="apple-touch-icon" sizes="72x72" href="http://web.archive.org/web/20230315160120im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/apple-touch-icon-72x72-precomposed.png"> <link rel="apple-touch-icon" href="http://web.archive.org/web/20230315160120im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/apple-touch-icon-precomposed.png"> <link rel="apple-touch-icon" href="http://web.archive.org/web/20230315160120im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/apple-touch-icon.png">  <meta property="fb:pages" content="499379160101212"/> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/> <meta content="width=device-width,initial-scale=1.0" name="viewport"/> <meta content="on" http-equiv="cleartype"/>  <meta name="format-detection" content="telephone=no"/> <meta name="google-site-verification" content="UNqcoVblscrmuOfPyGUTeRMyNRcroUK_U9ghx-PFl0Q"/> <link href="//web.archive.org/web/20230315160120cs_/https://fonts.googleapis.com/css?family=Roboto:300,300i,400,400i,500,500i" rel="stylesheet"> <link href="http://web.archive.org/web/20230315160120cs_/https://fonts.googleapis.com/css2?family=Roboto+Slab&display=swap" rel="stylesheet"> <link rel="stylesheet" href="http://web.archive.org/web/20230315160120cs_/https://www.jisc.ac.uk/sites/default/files/css/css_rEI_5cK_B9hB4So2yZUtr5weuEV3heuAllCDE6XsIkI.css"/> <style>.linklist__title{display:none;} .too_info .linklist__title{display:inline;} </style> <link rel="stylesheet" href="http://web.archive.org/web/20230315160120cs_/https://www.jisc.ac.uk/sites/default/files/css/css_oBsiHIoIA5lAPqK9E6jDdaNe3tAN5Nagql7giHq9cno.css"/> <link rel="stylesheet" href="http://web.archive.org/web/20230315160120cs_/https://www.jisc.ac.uk/sites/default/files/css/css_PsIMLeNhMOWYLk90AWTJ5AtR6KQeGbR_YScSoC_7uSM.css" media="print"/> <style type="text/css"> .cookie-bar { color: #fff; background-color: #0d224c;} .cookie-bar__confirm2, .cookie-bar__confirm, .cookie-bar__reject { padding: .9rem 1.8rem; color: #0D224E!important; line-height: 1; text-align: center; text-decoration: none!important; background-color: #fff; margin-left: 25px ; margin-left: 2.5rem ; font-size: 18px ; font-size: 1.8rem ; line-height: 22px ; line-height: 2.2rem ; -webkit-border-radius: 3px; -moz-border-radius: 3px; -ms-border-radius: 3px; -o-border-radius: 3px; border-radius: 3px; } .cookie-bar__confirm2:visited, .cookie-bar__confirm:visited, .cookie-bar__reject:visited { color: #0D224E; } @media print { .cookie-bar__reject:visited { color: #0D224E; } } .cookie-bar__confirm2:focus, .cookie-bar__confirm:focus, .cookie-bar__reject:focus { color: #007aaa; background-color: #d9d9d9; outline: 0.3rem solid #fd6; } .cookie-bar__confirm2:hover, .cookie-bar__confirm:hover, .cookie-bar__reject:hover { box-shadow: 0 0.3rem 1.2rem rgba(0, 0, 0, 0.23), 0 0.3rem 1.2rem rgba(0, 0, 0, 0.16); color: #0D224E; background-color: #d9d9d9; transition: all 0.3s cubic-bezier(0.25, 0.8, 0.25, 1); } .cookie-bar__reject:hover { transition: none; } .cookie-bar__reject:active { box-shadow: none; } .cookie-bar__confirm2:focus:hover, .cookie-bar__confirm:focus:hover, .cookie-bar__reject:focus:hover { color: #0D224E; text-decoration: none; background-color:#d9d9d9; outline: 0.3rem solid #fd6; } .cookie-bar__confirm2:active, .cookie-bar__confirm:active, .cookie-bar__reject:active { color: #0D224E; text-decoration: none; background-color: #d9d9d9; outline: 0.3rem solid #fd6; } </style> <script> dataLayer = []; </script> <script src="/web/20230315160120js_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/js/vendor/modernizr.js"></script> <script src="/web/20230315160120js_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/js/vendor/a11y-toggle.min.js"></script>  </head> <body class="jisc not-front no-sidebars node-type-guide">  <noscript><iframe src="http://web.archive.org/web/20230315160120if_/https://www.googletagmanager.com/ns.html?id=GTM-PWX6FN" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>  <div id="cookie-bar-main" class="cookie-bar" style="display: none;"> <div class="inner"> <p class="cookie-bar__notification">We use cookies to give you the best experience and to help improve our website</p> <p> <a class="cookie-bar__link" href="/web/20230315160120/https://www.jisc.ac.uk/website/cookies">Find out more about how we use cookies</a> </p> <p class="cookie-bar__options-title">Choose whether to use cookies:</p> <p class="cookie-bar__options"> <a href="#" class="cookie-bar__reject">No thanks</a> <a href="#" class="cookie-bar__confirm">Yes, I accept</a> </p> </div> </div> <header class="masthead jsSiteMasthead" role="banner" xmlns="http://www.w3.org/1999/html"> <div class="inner"> <a id="skiplinks" class="visuallyhidden focusable in-page" href="#main"> <span>Skip to main content</span> </a> </div> <div class="c-main-site-header jsMainSiteHeader"> <div class="c-main-site-header__primary-signpost "> <div class="c-main-site-header__container"> <div class="c-main-site-header__primary-signpost-inner"> <p class="c-main-site-header__brand"> <a class="c-main-site-header__brand-link" href="/web/20230315160120/https://www.jisc.ac.uk/" title="Go to the Jisc homepage"> <img class="c-main-site-header__brand-img" src="http://web.archive.org/web/20230315160120im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/img/jisc-logo.svg" alt="Jisc"/> </a> </p> <nav class="c-main-site-header__you-are-in" aria-label="Breadcrumb"> <p class="c-main-site-header__you-are-in-title">You are in:</p> <ul class="c-main-site-header__you-are-in-list"> <li><a href="/web/20230315160120/https://www.jisc.ac.uk/advice">Advice</a></li><li><a href="/web/20230315160120/https://www.jisc.ac.uk/guides">Guides</a></li><li><span>Data protection</span></li> </ul> </nav> <div class="c-main-site-header__utilities"> <p class="c-main-site-header__utilities-title">Utilities:</p> <ul class="c-main-site-header__utilities-list c-main-site-header__utilities-list--menu-triggers"> <li class="c-main-site-header__utilities-item"> <button class="c-main-site-header__trigger c-main-site-header__trigger--enabled jsUtilityTrigger" data-a11y-toggle="a11ytoggle-siteSearchTarget" data-trigger-role="search" aria-label="Search this website"> <div class="c-main-site-header__trigger-search-icon jsFnbMenuIconTrigger" data-icon-role="search"> <span class="c-main-site-header__trigger-search-icon-circle"></span> <span class="c-main-site-header__trigger-search-icon-handle"></span> </div> <span class="c-main-site-header__trigger-copy">Search this website</span> </button> </li> <li class="c-main-site-header__utilities-item"> <button class="c-main-site-header__trigger c-main-site-header__trigger--disabled" aria-disabled="true" aria-label="Disabled site navigation" disabled="disabled"> <div class="c-main-site-header__trigger-menu-icon" data-icon-role="navigation"> <span class="c-main-site-header__trigger-menu-icon-line"></span> <span class="c-main-site-header__trigger-menu-icon-line"></span> <span class="c-main-site-header__trigger-menu-icon-line"></span> </div> <span class="c-main-site-header__trigger-copy">Disabled site navigation</span> </button> </li> </ul> <ul class="c-main-site-header__utilities-list c-main-site-header__utilities-list--nav-and-site-search"> <li class="c-main-site-header__utilities-item"> <div class="search search--not-front" id="search"> <span class="c-main-site-header__site-search-label-copy">Search the Jisc website</span> <form action="/web/20230315160120/https://www.jisc.ac.uk/search" method="post" id="search-api-page-search-form-search-" accept-charset="UTF-8"> <label class="visuallyhidden" for="search_term"><span class="form-fields__label-text">Search </span></label> <input class="ui-autocomplete-input" placeholder="Search Jisc" id="search_term" autocomplete="off" type="text" name="keys_1" value="" size="30" maxlength="128"/> <input type="hidden" name="id" value="1"/> <a href="#" class="close ico ico-cross">Clear search results</a><input class="ico ico-search-glass" type="submit" id="edit-submit-1" name="op" value="Search"/><input type="hidden" name="form_build_id" value="form-EoYJk86saG5sLYsdMPwxYoz3eDkFJ3Mri1cGjLD7RF0"/> <input type="hidden" name="form_id" value="search_api_page_search_form_search_"/> </form> <div id="search-results" class="search-results-dropdown"> <p class="search-results__intro"></p> </div> </div> </li> </ul> </div> </div> </div> </div> <div class="c-main-site-header__menu jsMenuTarget" id="a11ytoggle-siteSearchTarget" data-is-small-viewport=""> <div class="c-main-site-header__site-search c-main-site-header__site-search--in-menu" role="search"> <div class="search search--not-front" id="search"> <span class="c-main-site-header__site-search-label-copy">Search the Jisc website</span> <form action="/web/20230315160120/https://www.jisc.ac.uk/search" method="post" id="search-api-page-search-form-search-" accept-charset="UTF-8"> <label class="visuallyhidden" for="search_term"><span class="form-fields__label-text">Search </span></label> <input class="ui-autocomplete-input" placeholder="Search Jisc" id="search_term" autocomplete="off" type="text" name="keys_1" value="" size="30" maxlength="128"/> <input type="hidden" name="id" value="1"/> <a href="#" class="close ico ico-cross">Clear search results</a><input class="ico ico-search-glass" type="submit" id="edit-submit-1" name="op" value="Search"/><input type="hidden" name="form_build_id" value="form-EoYJk86saG5sLYsdMPwxYoz3eDkFJ3Mri1cGjLD7RF0"/> <input type="hidden" name="form_id" value="search_api_page_search_form_search_"/> </form> <div id="search-results" class="search-results-dropdown"> <p class="search-results__intro"></p> </div> </div> </div> </div> <div class="c-main-site-header__menu" aria-hidden="true"> <nav> <div class="c-main-site-header__main-nav jsMainNavHook"> <p class="c-main-site-header__main-nav-title">Navigation:</p> <div class="c-main-site-header__main-nav-secondary jsMainNavSecondaryHook"> </div> </div> </nav> </div> </div> </header> <main id="main" class="jsMainContent" role="main"> <div class="inner l-pull-left featured top-bar"> <div class="l-centre-offset row"> </div> </div> <section class="t-guides-and-cribsheets"> <div class="inner"><div id="target-space"></div></div>  <div class="inner l-pull-left featured top-bar"> <div class="l-centre-offset"> <article class="article-full"> <header class="article-full__header"> <span class="marker marker--page">Quick guide</span> <div class="row"> <div class="col span-9"> <h1 class="page-title">Data protection</h1> <div class="profile profile--medium"> <div class="profile__info"> <p> Last updated: <time property="dc:date" datatype="xsd:dateTime" content="2021-01-20T10:00:00+00:00" datetime="2021-01-20T10:00:00+00:00">20 January 2021</time> </p> </div> </div> </div> <div class="col span-3"> </div> </div> </header> <div class="row"> <div class="col span-9"> <div class="article-full__body">  <h2>The issue</h2><p>Data protection law regulates how colleges, universities and other learning providers collect and use information about students, staff and others. It also provides individuals with the right to access information that is held about them.</p><p>Data protection is part of the fundamental right to privacy and concerns the fair and proper use of information about people. Those who handle personal data must treat people fairly and openly.</p><h2>What the law says</h2><p>UK data protection law is set out in the <a href="http://web.archive.org/web/20230315160120/http://www.legislation.gov.uk/ukpga/2018/12/contents/enacted">Data Protection Act 2018 (DPA 2018)</a>, along with the <a href="http://web.archive.org/web/20230315160120/https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN">General Data Protection Regulation (GDPR) (EU) 2016/679</a> (which also forms part of UK law).</p><p>This legislation requires accountability and transparency from all those who collect and handle any information relating to an identifiable individual (personal data).</p><h3>Key principles</h3><p>The legislation sets out key principles which lie at the heart of the data protection regime. In brief personal data must be:</p><ul><li>Processed lawfully, fairly and transparently</li><li>Collected only for specified purposes</li><li>Limited to what is necessary for those purposes</li><li>Kept accurate</li><li>Held for no longer than is necessary</li><li>Retained securely</li></ul><h2>What you need to do</h2><h3>Comply with the principles</h3><p>Compliance with the spirit of these key principles is a fundamental building block for good data protection practice and the institution must have appropriate measures and records in place to be able to demonstrate compliance. Failure to comply with the principles can leave an institution open to substantial fines.</p><h3>Provide privacy information</h3><p>Students, staff and others have the right to be informed about the collection and use of their personal data. This is a key transparency requirement.</p><p>Privacy information must be provided to individuals which informs them of the purposes for processing their personal data, the retention periods for that personal data, and who it will be shared with. The information that you provide must be concise, transparent, intelligible, easily accessible, and it must use clear and plain language.</p><h3>Process personal data lawfully</h3><p>The law prohibits the processing of personal data unless the data controller is able to identify an appropriate legal basis for that processing.</p><p>Article 6(1) of the <span class="lexicon-term has-tooltip" title="General Data Protection Regulation"><abbr title="General Data Protection Regulation">GDPR</abbr></span> sets out six lawful bases for processing. At least one of these must apply whenever your institution is processing personal data:</p><ul><li><strong>Contract</strong>: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract</li><li><strong>Legal obligation</strong>: the processing is necessary for you to comply with the law (not including contractual obligations)</li><li><strong>Vital interests</strong>: the processing is necessary to protect someone’s life.</li><li><strong>Public task:</strong> the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law</li><li><strong>Legitimate interests</strong>: the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. (This cannot apply if you are a public authority processing data to perform your official tasks)</li><li><strong>Consent</strong>: the individual has given clear consent for you to process their personal data for a specific purpose</li></ul><p>Universities and colleges are classified as public authorities, so the public task basis is likely to apply to much of their processing. In addition, consent or legitimate interests will be appropriate in some circumstances.</p><h3>Keep records of processing activities</h3><p>A key element of accountability is maintaining records of your processing activities. This can help you to ensure (and demonstrate) your compliance and is likely to improve data governance and increase business efficiency.</p><p><a href="http://web.archive.org/web/20230315160120/https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/accountability-and-governance/documentation/">Article 30(1) of the GDPR</a> specifies areas where records must be maintained including the reasons for processing personal data, data sharing and retention. An institution may be required to make the records available to the ICO on request.</p><h2><strong>The UK has left the EU – what has changed?</strong></h2><p>The UK has completed a trade deal with the EU and the GDPR (now retitled as “UK GDPR”) has been retained in UK law. EU data protection law has been converted into UK domestic law, with some minor technical amendments to ensure it is operable in the UK. In practice there is little change to the core data protection principles, rights and obligations now found in the UK <span class="lexicon-term has-tooltip" title="General Data Protection Regulation"><abbr title="General Data Protection Regulation">GDPR</abbr></span>. The <span class="lexicon-term has-tooltip" title="Data Protection Act"><abbr title="Data Protection Act">DPA</abbr></span> 2018, which supplements and tailors the UK <span class="lexicon-term has-tooltip" title="General Data Protection Regulation"><abbr title="General Data Protection Regulation">GDPR</abbr></span> continues to apply.</p><h3><strong>Check the conditions for transferring data internationally</strong></h3><p>On 1 January 2021, the UK became a third country for the purposes of international data transfers under the EU <span class="lexicon-term has-tooltip" title="General Data Protection Regulation"><abbr title="General Data Protection Regulation">GDPR</abbr></span>. Personal data may only be transferred overseas with adequate safeguards. There is currently no change to the way that personal data is sent to the EU/EEA, and other countries deemed adequate by the EU.</p><h4><strong>Receiving personal data from the EU/EEA</strong></h4><p>In addition, the EU-UK Trade and Cooperation Agreement contains a bridging mechanism that allows the continued free flow of personal data from the EU/EEA to the UK after the transition period. This lasts for up to six months, which gives time for the EU Commission to consider making an adequacy decision. An EU adequacy decision for the UK would allow for the ongoing free flow of data from the EEA to the UK. In the event of no EU adequacy decision for the UK, new as yet undecided procedures will be needed.</p><p>For up-to-date information on international data transfers now that the UK has left the EU, <a href="http://web.archive.org/web/20230315160120/https://www.gov.uk/guidance/using-personal-data-in-your-business-or-other-organisation">see the UK government guidance</a>. </p><h4><strong>Schrems II</strong></h4><p>On 16 July 2020 the Court of Justice of the European Union (CJEU or ECJ) upheld Standard Contract Clauses as a valid tool for the international transfer of personal data where they (together with appropriate additional measures) provide for “essentially equivalent” protection as in the EU. <a href="http://web.archive.org/web/20230315160120/https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2020/07/updated-ico-statement-on-the-judgment-of-the-european-court-of-justice-in-the-schrems-ii-case/">Further details on international transfers post the Schrems II case are available on the ICO website</a>.</p><h2>What you can do now</h2><ul><li>Ensure that staff at your institution are familiar with and adhering to the <a href="http://web.archive.org/web/20230315160120/https://ico.org.uk/for-organisations/guide-to-data-protection/">ICO Guide to Data Protection</a></li><li>Use <a href="http://web.archive.org/web/20230315160120/https://www.jisc.ac.uk/gdpr">our practical resources and advice</a> to help you understand and apply <span class="lexicon-term has-tooltip" title="General Data Protection Regulation"><abbr title="General Data Protection Regulation">GDPR</abbr></span> legislation</li><li>Follow the <a href="http://web.archive.org/web/20230315160120/https://regulatorydevelopments.jiscinvolve.org/wp/">Jisc involve blog for updates on GDPR and other regulatory developments</a></li></ul><h2>Further resources</h2><ul><li>Take a look at <a href="http://web.archive.org/web/20230315160120/https://www.jisc.ac.uk/consultancy">our consultancy service</a>, offering expert, targeted support and practical assistance to help you to transform your university or college through digital technologies</li><li>Watch our video - <a href="http://web.archive.org/web/20230315160120/https://regulatorydevelopments.jiscinvolve.org/wp/2020/09/11/brexit-in-58-seconds/">Brexit in 58 seconds...</a></li><li><a href="http://web.archive.org/web/20230315160120/https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=data-protection&A=1">Join the data protection JiscMail mailing list</a></li></ul> </div> <footer class="article-full__footer"> <dl class="article-full__tags l-gutter--top"> <dt>Explore more on this topic</dt> <dd><a href="/web/20230315160120/https://www.jisc.ac.uk/guides?f%5B0%5D=field_key_issues%3A740">Cyber security</a></dd><dd><a href="/web/20230315160120/https://www.jisc.ac.uk/guides?f%5B0%5D=field_project_topics%3A449">Data and analytics</a></dd><dd><a href="/web/20230315160120/https://www.jisc.ac.uk/guides?f%5B0%5D=field_project_topics%3A490">Legal</a></dd><dd><a href="/web/20230315160120/https://www.jisc.ac.uk/guides?f%5B0%5D=field_project_topics%3A495">Security and access and identity management</a></dd> </dl> </footer> </div> <div class="col span-3" role="complementary"> <div class="l-gutter--both"> <aside class="mini-tabs mini-tabs--news"><div class="nav "><div class="linklist__title">RHS Generic</div><div class=" is-tabbed"><section class="cx_tabs__section"> <div class="cx_tabs__heading cx_collapsibles__trigger section__title">Most read</div> <div class="cx_tabs__content">  <div class="view-header"> </div> <div class="view-filters"> </div> <div class="attachment attachment-before"> </div>  <div class="linklist linklist--small"> <ul> <li class="linklist__item"> <span class="field-content"><a href="/web/20230315160120/https://www.jisc.ac.uk/guides/framework-for-digital-transformation-in-higher-education">Framework for digital transformation in higher education</a></span></li> <li class="linklist__item"> <span class="field-content"><a href="/web/20230315160120/https://www.jisc.ac.uk/guides/preparing-for-chatbots-by-engaging-key-internal-stakeholders">Preparing for chatbots by engaging key internal stakeholders</a></span></li> <li class="linklist__item"> <span class="field-content"><a href="/web/20230315160120/https://www.jisc.ac.uk/guides/building-the-future-intelligent-campus/what-is-an-intelligent-campus">What is an intelligent campus? </a></span></li> <li class="linklist__item"> <span class="field-content"><a href="/web/20230315160120/https://www.jisc.ac.uk/guides/applying-the-samr-model">Applying the SAMR model to aid your digital transformation</a></span></li> <li class="linklist__item"> <span class="field-content"><a href="/web/20230315160120/https://www.jisc.ac.uk/guides/accessibility-regulations-what-you-need-to-know">Accessibility regulations - what you need to know</a></span></li> </ul> </div> <div class="attachment attachment-after"> </div> <div class="view-footer"> </div> <div class="feed-icon"> </div> </div></section> <section class="cx_tabs__section"> <div class="cx_tabs__heading cx_collapsibles__trigger section__title">Related</div> <div class="cx_tabs__content">  <div class="view-header"> </div> <div class="attachment attachment-before"> </div> <div class="linklist linklist--small"> <ul> <li class="linklist__item"> <div> <span><a href="/web/20230315160120/https://www.jisc.ac.uk/guides/preparing-for-the-general-data-protection-regulation-gdpr">Preparing for the General Data Protection Regulation (GDPR)</a></span> </div></li> <li class="linklist__item"> <div> <span><a href="/web/20230315160120/https://www.jisc.ac.uk/guides/records-retention-management">Records retention management</a></span> </div></li> <li class="linklist__item"> <div> <span><a href="/web/20230315160120/https://www.jisc.ac.uk/guides/code-of-practice-for-learning-analytics">Code of practice for learning analytics</a></span> </div></li> <li class="linklist__item"> <div> <span><a href="/web/20230315160120/https://www.jisc.ac.uk/guides/building-the-future-intelligent-campus/ethics">Ethics </a></span> </div></li> <li class="linklist__item"> <div> <span><a href="/web/20230315160120/https://www.jisc.ac.uk/guides/code-of-practice-for-wellbeing-and-mental-health-analytics/validity">Validity</a></span> </div></li> </ul> </div> <div class="attachment attachment-after"> </div> <div class="view-footer"> </div> <div class="feed-icon"> </div> </div></section> </div></div></aside>  <aside class="is-tabbed ui-tabs ui-widget ui-widget-content ui-corner-all related-box"> <h3 class="related-box__title">Contact us</h3> <div class="field-collection-container clearfix"> <div class="field-collection-view clearfix view-mode-full field-collection-view-final">  <article class="profile" itemscope itemtype="http://schema.org/Person"> <div class="duo"> <div class="duo__side"> <a class="profile__photo--small" href="/web/20230315160120/https://www.jisc.ac.uk/staff/john-kelly"> <img typeof="foaf:Image" src="http://web.archive.org/web/20230315160120im_/https://www.jisc.ac.uk/sites/default/files/styles/author_thumb_small/public/john-kelly.jpg?itok=qkS0xLM-" alt="John Kelly"/> </a> </div> <div class="duo__body"> <p class="profile__name"> <a href="/web/20230315160120/https://www.jisc.ac.uk/staff/john-kelly"> <span itemprop="name">John X Kelly</span> </a> </p> </div> </div> </article> John is our subject specialist in technology and the law. </div> </div> </aside> </div> </div> </div> </article> </div> </div> </section> <input type="hidden" id="affinity-tags" value="Cyber security"> <script> adobe.target.getOffer({ "mbox": "target-global-mbox", "params": { "user.categoryId": document.getElementById("affinity-tags").value, "entity.categoryId": document.getElementById("affinity-tags").value }, "success": function(offers) { adobe.target.applyOffer({ "mbox": "target-global-mbox", "offer": offers }); }, "error": function(status, error) { }, "timeout": 5000 }); </script> <div class="inner l-pull-left"> <div class="l-centre-offset"> <aside class="article-full__related l-gutter--top"> <h3 class="section__title">You may also like…</h3><div class="region region--2-up"> <div class="block block-1"> <article class="teaser t-generic-content"> <span class="marker">Generic</span> <div class="teaser__copy"> <h4 class="teaser__title"><a href="/web/20230315160120/https://www.jisc.ac.uk/gdpr/gdpr-and-our-service-terms">GDPR and our service terms</a></h4> From the 25th May 2018, the new General Data Protection Regulation (GDPR) will apply.  <br/> </div> <footer class="teaser__footer"> </footer> </article> </div>  <div class="block block-2"> <article class="teaser t-news-and-blog"> <span class="marker">Blog</span> <div class="teaser__copy"> <h4 class="teaser__title"><a href="/web/20230315160120/https://www.jisc.ac.uk/blog/dont-leave-colleges-to-fend-for-themselves-a-journey-towards-gdpr-compliance-23-sep-2020">‘Don’t leave colleges to fend for themselves’: a journey towards GDPR compliance</a></h4> How the further education sector in the UK is working together to embrace GDPR.<br/> </div> <footer class="teaser__footer"> </footer> </article> </div> </div> </aside> </div> </div> </section> </main> <footer role="contentinfo"> <div class="inner l-pull-left light l-gutter--top"> <div class="l-centre-offset row"> </div>  <div class="l-centre-offset row"> </div>  </div> <div class="inner l-pull-left medium"> <div class="l-centre-offset"> <div class="region region--4-up"> </div> </div>  </div>  <div class="c-main-site-footer">  <div class="c-main-site-footer__breadcrumb"> <div class="inner inner--main-site-footer"> <div class="c-main-site-footer-grid"> <div class="c-main-site-footer-grid__item u-6/12@medium u-9/12@large"> <nav class="c-main-site-footer__you-are-here" aria-label="Breadcrumb"> <p class="c-main-site-footer__you-are-here-title">You are in:</p> <div class="c-main-site-footer__you-are-here-item-home"> <a class="c-main-site-footer__you-are-here-link" href="/web/20230315160120/https://www.jisc.ac.uk/" aria-label="Jisc homepage"><i class="fas fa-home" aria-hidden="true"></i></a> </div> <ul> <li><a href="/web/20230315160120/https://www.jisc.ac.uk/advice">Advice</a></li><li><a href="/web/20230315160120/https://www.jisc.ac.uk/guides">Guides</a></li><li><span>Data protection</span></li> </ul> </nav> </div> <div class="c-main-site-footer-grid__item u-6/12@medium u-3/12@large">   </div> </div> </div> </div>  <div class="c-main-site-footer__linklist"> <div class="inner inner--main-site-footer"> <div class="c-main-site-footer-grid"> <div class="c-main-site-footer-grid__item u-6/12@medium u-3/12@large"> <h2 class="c-main-site-footer__linklist-title">Areas</h2> <ul class="c-main-site-footer__linklist-group"><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/connectivity">Connectivity</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/cyber-security">Cyber security</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/cloud">Cloud</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/data-and-analytics">Data analytics</a></li></ul><ul><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/libraries-and-research">Libraries, learning resources and research</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/student-experience">Student experience</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/trust-and-identity">Trust and identity</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/advice">Advice and guidance</a></li></ul> </div> <div class="c-main-site-footer-grid__item u-6/12@medium u-3/12@large"> <h2 class="c-main-site-footer__linklist-title">Explore</h2> <ul class="c-main-site-footer__linklist-group"><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/guides">Guides</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="http://web.archive.org/web/20230315160120/https://beta.jisc.ac.uk/training">Training</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/consultancy">Consultancy</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="http://web.archive.org/web/20230315160120/https://beta.jisc.ac.uk/events">Events</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/rd">Innovation</a></li></ul> </div> <div class="c-main-site-footer-grid__item u-6/12@medium u-3/12@large"> <h2 class="c-main-site-footer__linklist-title">Useful</h2> <ul class="c-main-site-footer__linklist-group"><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/about">About</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/membership">Membership</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/get-involved">Get involved</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/news">News</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/jobs">Jobs</a></li></ul> </div> <div class="c-main-site-footer-grid__item u-6/12@medium u-3/12@large"> <h2 class="c-main-site-footer__linklist-title">Get in touch</h2> <ul class="c-main-site-footer__linklist-group"> <li class="c-main-site-footer__linklist-item"> <a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/contact"> Contact us </a> </li> <li class="c-main-site-footer__linklist-item"> <a class="c-main-site-footer__linklist-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/headlines"> Sign up to our newsletter </a> </li> <li class="c-main-site-footer__linklist-item"> <a class="c-main-site-footer__linklist-item-link-social" href="http://web.archive.org/web/20230315160120/https://twitter.com/jisc"> <i class="fab fa-twitter" aria-hidden="true"></i> <span class="c-main-site-footer__linklist-item-link-social-copy">Twitter</span> </a> </li> <li class="c-main-site-footer__linklist-item"> <a class="c-main-site-footer__linklist-item-link-social" href="http://web.archive.org/web/20230315160120/https://www.facebook.com/jiscsocial"> <i class="fab fa-facebook" aria-hidden="true"></i> <span class="c-main-site-footer__linklist-item-link-social-copy">Facebook</span> </a> </li> <li class="c-main-site-footer__linklist-item"> <a class="c-main-site-footer__linklist-item-link-social" href="http://web.archive.org/web/20230315160120/https://www.linkedin.com/company/jisc"> <i class="fab fa-linkedin" aria-hidden="true"></i> <span class="c-main-site-footer__linklist-item-link-social-copy">LinkedIn</span> </a> </li> <li class="c-main-site-footer__linklist-item"> <a class="c-main-site-footer__linklist-item-link-social" href="http://web.archive.org/web/20230315160120/http://www.youtube.com/user/JISCmedia"> <i class="fab fa-youtube" aria-hidden="true"></i> <span class="c-main-site-footer__linklist-item-link-social-copy">YouTube</span> </a> </li> </ul></div> </div> </div> </div>  <div class="c-main-site-footer__utilities"> <div class="inner inner--main-site-footer"> <div class="c-main-site-footer-grid"> <div class="c-main-site-footer-grid__item u-6/12@medium u-9/12@large"> <ul class="c-main-site-footer__utilities-list"><li class="c-main-site-footer__utilities-list-item"><a class="c-main-site-footer_utilities-list-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/website/cookies">Cookies</a></li> <li class="c-main-site-footer__utilities-list-item"><a class="c-main-site-footer_utilities-list-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/website/privacy-notice">Privacy</a></li> <li class="c-main-site-footer__utilities-list-item"><a class="c-main-site-footer_utilities-list-item-link" href="/web/20230315160120/https://www.jisc.ac.uk/about/corporate/slavery-and-human-trafficking-statement">Modern slavery</a></li> <li class="c-main-site-footer__utilities-list-item"><a class="c-main-site-footer__utilities-additional-link" href="/web/20230315160120/https://www.jisc.ac.uk/about/corporate/carbon-reduction-plan">Carbon reduction plan</a></li> <li class="c-main-site-footer__utilities-list-item"><a class="c-main-site-footer__utilities-additional-link" href="/web/20230315160120/https://www.jisc.ac.uk/website/accessibility-statement">Accessibility</a></li></ul> </div> <div class="c-main-site-footer-grid__item u-6/12@medium u-3/12@large"> </div> </div> </div> </div> </div> <script src="//web.archive.org/web/20230315160120js_/https://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js"></script> <script>window.jQuery || document.write("<script src='/sites/all/modules/contrib/jquery_update/replace/jquery/1.8/jquery.min.js'>\x3C/script>")</script> <script src="http://web.archive.org/web/20230315160120js_/https://www.jisc.ac.uk/sites/default/files/js/js_38VWQ3jjQx0wRFj7gkntZr077GgJoGn5nv3v05IeLLo.js"></script> <script src="//web.archive.org/web/20230315160120js_/https://ajax.googleapis.com/ajax/libs/jqueryui/1.10.2/jquery-ui.min.js"></script> <script>window.jQuery.ui || document.write("<script src='/sites/all/modules/contrib/jquery_update/replace/ui/ui/minified/jquery-ui.min.js'>\x3C/script>")</script> <script src="http://web.archive.org/web/20230315160120js_/https://www.jisc.ac.uk/sites/default/files/js/js_HVnCCIgHRirQpRoFWonc_8bBPFRPIQcCowhXgVKGqmM.js"></script> <script src="http://web.archive.org/web/20230315160120js_/https://www.jisc.ac.uk/sites/default/files/js/js_yxpcsmG10aGVUSD90BA4qltlgKI1rbhnUmWB7jdXazY.js"></script> <script src="http://web.archive.org/web/20230315160120js_/https://www.jisc.ac.uk/sites/default/files/js/js_eZl_aZIWhg-DnrFvYsJxq8eGzHifHRy69aHsFnzrlYA.js"></script> <script src="http://web.archive.org/web/20230315160120js_/https://www.google.com/recaptcha/api.js"></script> <script src="http://web.archive.org/web/20230315160120js_/https://www.jisc.ac.uk/sites/default/files/js/js_-bYDucO2dMNyh_p388rTq6juq7Bml1CFSjiR67jUMB4.js"></script> <script src="http://web.archive.org/web/20230315160120js_/https://www.jisc.ac.uk/sites/default/files/js/js_gGSozz5nhS9RR6GeFycLd0mjTBR0-860cSp4ccsVjF8.js"></script> <script>jQuery.extend(Drupal.settings, {"basePath":"\/","pathPrefix":"","ajaxPageState":{"theme":"jisc_clean","theme_token":"d4DG4poKc9Tfs_2wyC3EOFiCUHAhfXNadnQKXyCOoxc","jquery_version":"1.8","js":{"\/\/web.archive.org\/web\/20230315160120\/https:\/\/ajax.googleapis.com\/ajax\/libs\/jquery\/1.8.3\/jquery.min.js":1,"0":1,"misc\/jquery-extend-3.4.0.js":1,"misc\/jquery-html-prefilter-3.5.0-backport.js":1,"misc\/jquery.once.js":1,"misc\/drupal.js":1,"\/\/web.archive.org\/web\/20230315160120\/https:\/\/ajax.googleapis.com\/ajax\/libs\/jqueryui\/1.10.2\/jquery-ui.min.js":1,"1":1,"sites\/all\/modules\/contrib\/jquery_update\/replace\/ui\/external\/jquery.cookie.js":1,"sites\/all\/modules\/contrib\/jquery_update\/replace\/jquery.form\/4\/jquery.form.min.js":1,"misc\/jquery.ba-bbq.js":1,"misc\/ajax.js":1,"sites\/all\/modules\/contrib\/jquery_update\/js\/jquery_update.js":1,"sites\/all\/modules\/custom\/jisc_search_section\/js\/jiscSectionSearch.js":1,"sites\/all\/modules\/contrib\/views\/js\/base.js":1,"misc\/progress.js":1,"sites\/all\/modules\/custom\/jisc_ia_nav\/js\/JiscIaNav.js":1,"http:\/\/web.archive.org\/web\/20230315160120\/https:\/\/www.google.com\/recaptcha\/api.js":1,"sites\/all\/modules\/contrib\/views\/js\/ajax_view.js":1,"sites\/all\/themes\/mothership\/mothership\/js\/contextual.js":1,"sites\/all\/themes\/jisc_clean\/js\/jisc-lib.min.js":1,"sites\/all\/themes\/jisc_clean\/js\/extras.js":1,"sites\/all\/themes\/jisc_clean\/js\/integration\/timeline.js":1,"sites\/all\/themes\/jisc_clean\/js\/jisc-p13n.js":1},"css":{"modules\/system\/system.base.css":1,"modules\/system\/system.messages.css":1,"0":1,"1":1,"sites\/all\/themes\/jisc_clean\/css\/content.css":1,"sites\/all\/themes\/jisc_clean\/css\/print.css":1}},"jiscFlashPath":"\/sites\/all\/themes\/jisc_clean\/flash\/","searchAutocompletePath":"\/server\/search-results","urlIsAjaxTrusted":{"\/search":true,"\/views\/ajax":true,"\/search\/24060":true},"facetapi":{"view_args":{"popular_content:block_4":["guide","guide","guide","guide"],"search:block_4":["24060","guide","24060","guide","24060","guide"],"popular_content:block_4-1":["guide","guide"],"search:block_4-1":["24060","guide"]},"exposed_input":{"popular_content:block_4":[],"search:block_4":{"sort_by":"search_api_relevance","sort_order":"DESC"},"popular_content:block_4-1":[],"search:block_4-1":{"sort_by":"","sort_order":"DESC"}},"view_path":{"popular_content:block_4":null,"search:block_4":"search","popular_content:block_4-1":null,"search:block_4-1":"search"},"view_dom_id":{"popular_content:block_4":"86c193f2ef89e670708398adb9289ce3","search:block_4":"ebdf3d5f13ec80827a36f71166e350a8","popular_content:block_4-1":"02126d797793ab29d6c284e022036e15","search:block_4-1":"f4a50b5facb5be528b40cf794900a1b5"}},"views":{"ajax_path":"\/views\/ajax","ajaxViews":{"views_dom_id:ebdf3d5f13ec80827a36f71166e350a8":{"view_name":"search","view_display_id":"block_4","view_args":"24060\/guide","view_path":"node\/24060","view_base_path":"search","view_dom_id":"ebdf3d5f13ec80827a36f71166e350a8","pager_element":0},"views_dom_id:f4a50b5facb5be528b40cf794900a1b5":{"view_name":"search","view_display_id":"block_4","view_args":"24060\/guide","view_path":"node\/24060","view_base_path":"search","view_dom_id":"f4a50b5facb5be528b40cf794900a1b5","pager_element":0}}},"quicktabs":{"qt_rhs_generic":{"name":"rhs_generic","active_tab":0,"history":0}}});</script> </body> </html>

CINXE.COM

Data protection | Jisc