CINXE.COM

<!DOCTYPE html> <html class="no-js no-touch" lang="en" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/terms/" xmlns:foaf="http://xmlns.com/foaf/0.1/" xmlns:og="http://ogp.me/ns#" xmlns:rdfs="http://www.w3.org/2000/01/rdf-schema#" xmlns:sioc="http://rdfs.org/sioc/ns#" xmlns:sioct="http://rdfs.org/sioc/types#" xmlns:skos="http://www.w3.org/2004/02/skos/core#" xmlns:xsd="http://www.w3.org/2001/XMLSchema#"> <head><script type="text/javascript" src="/_static/js/bundle-playback.js?v=HxkREWBo" charset="utf-8"></script> <script type="text/javascript" src="/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("http://web.archive.org/web"); __wm.wombat("https://www.hesa.ac.uk/about/regulation/data-protection/guidance","20230331172033","http://web.archive.org/","web","/_static/", "1680283233"); </script> <link rel="stylesheet" type="text/css" href="/_static/css/banner-styles.css?v=S1zqJCYt" /> <link rel="stylesheet" type="text/css" href="/_static/css/iconochive.css?v=3PDvdIFv" />  <title>Data protection guidance for the HESA records | HESA</title> <meta name="viewport" content="width=device-width, initial-scale=1"/> <meta http-equiv="cleartype" content="on"/> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/> <link rel="apple-touch-icon-precomposed" sizes="57x57" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-57x57.png"/> <link rel="apple-touch-icon-precomposed" sizes="114x114" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-114x114.png"/> <link rel="apple-touch-icon-precomposed" sizes="72x72" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-72x72.png"/> <link rel="apple-touch-icon-precomposed" sizes="144x144" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-144x144.png"/> <link rel="apple-touch-icon-precomposed" sizes="60x60" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-60x60.png"/> <link rel="apple-touch-icon-precomposed" sizes="120x120" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-120x120.png"/> <link rel="apple-touch-icon-precomposed" sizes="76x76" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-76x76.png"/> <link rel="apple-touch-icon-precomposed" sizes="152x152" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/apple-touch-icon-152x152.png"/> <link rel="icon" type="image/png" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/favicon-196x196.png" sizes="196x196"/> <link rel="icon" type="image/png" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/favicon-96x96.png" sizes="96x96"/> <link rel="icon" type="image/png" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/favicon-32x32.png" sizes="32x32"/> <link rel="icon" type="image/png" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/favicon-16x16.png" sizes="16x16"/> <link rel="icon" type="image/png" href="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/favicons/favicon-128.png" sizes="128x128"/> <meta name="msapplication-TileColor" content="#FFFFFF"/> <meta name="msapplication-TileImage" content="/sites/all/themes/hesa/favicons/mstile-144x144.png"/> <meta name="msapplication-square70x70logo" content="/sites/all/themes/hesa/favicons/mstile-70x70.png"/> <meta name="msapplication-square150x150logo" content="/sites/all/themes/hesa/favicons/mstile-150x150.png"/> <meta name="msapplication-wide310x150logo" content="/sites/all/themes/hesa/favicons/mstile-310x150.png"/> <meta name="msapplication-square310x310logo" content="/sites/all/themes/hesa/favicons/mstile-310x310.png"/> <script> var GTMID = 'GTM-WM8325T'; (function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); })(window, document, 'script', 'dataLayer', GTMID); (function (w, d, s, l, i) { var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'http://web.archive.org/web/20230331172033/https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', GTMID); </script> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <link rel="canonical" href="http://web.archive.org/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/guidance"/> <link rel="shortlink" href="http://web.archive.org/web/20230331172033/https://www.hesa.ac.uk/node/444"/> <link type="text/css" rel="stylesheet" href="http://web.archive.org/web/20230331172033cs_/https://www.hesa.ac.uk/files/css/css_fncS-7zbIZ96_cAOhMstFXZ9r7ch0ucyDNZ1bM59C0w.css" media="all"/> <link type="text/css" rel="stylesheet" href="http://web.archive.org/web/20230331172033cs_/https://www.hesa.ac.uk/files/css/css_8Mv8U09WxD3oamjWR5OQxfdZ76AR07ALOYFNEGDTvhk.css" media="all"/> <link type="text/css" rel="stylesheet" href="http://web.archive.org/web/20230331172033cs_/https://www.hesa.ac.uk/files/css/css_47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU.css" media="all"/> <link href="/web/20230331172033cs_/https://www.hesa.ac.uk/sites/all/themes/hesa/styles/basic.css" rel="stylesheet"/>  <link href="/web/20230331172033cs_/https://www.hesa.ac.uk/sites/all/themes/hesa/styles/deluxe.css" rel="stylesheet"/>  <link media="print" href="/web/20230331172033cs_/https://www.hesa.ac.uk/sites/all/themes/hesa/styles/print.css" rel="stylesheet"/>  </head> <body class="html not-front not-logged-in no-sidebars page-node page-node- page-node-444 node-type-page">  <noscript><iframe src="http://web.archive.org/web/20230331172033if_/https://www.googletagmanager.com/ns.html?id=GTM-WM8325T" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>  <a href="#main-content" class="element-invisible element-focusable">Skip to main content</a> <header class="header-site"> <div class="wrap"> <div class="inner"> <a class="toggle-nav-site" id="toggle-nav-site" href="#nav-site" aria-controls="nav-site" aria-expanded="false" aria-label="Toggle Main Navigation" role="button"></a> <a class="toggle-search" id="toggle-search" href="#search-block-form" aria-controls="search-block-form" aria-expanded="false" aria-label="Toggle Site Search" role="button"></a> <div class="primary"> <div class="logo"> <a href="/web/20230331172033/https://www.hesa.ac.uk/" title="Home" rel="home"> <img src="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/img/hesa-logo.jpg" alt="Home"/> </a> </div> </div> <div class="secondary"> <div class="region region-search-form"> <div id="block-search-form" class="block block-search"> <div class="content"> <form action="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/guidance" method="post" id="search-block-form" accept-charset="UTF-8"><div><div class="container-inline"> <h2 class="element-invisible">Search form</h2> <div class="form-item form-type-textfield form-item-search-block-form"> <label class="element-invisible" for="edit-search-block-form--2">Search </label> <input title="Enter the terms you wish to search for." type="text" id="edit-search-block-form--2" name="search_block_form" value="" size="15" maxlength="128" class="form-text"/> </div> <div class="form-actions form-wrapper" id="edit-actions"><input type="submit" id="edit-submit" name="op" value="Search" class="form-submit"/></div><input type="hidden" name="form_id" value="search_block_form"/> </div> </div></form> </div> </div> </div> </div> </div> </div> <nav class="nav-site" id="nav-site" aria-label="Main Navigation"> <div class="wrap"> <div class="region region-main-menu"> <div id="block-system-main-menu" class="block block-system block-menu"> <div class="content"> <ul class="menu"><li class="first leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/data-and-analysis" title="">Open data</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/collection" title="">Data Collection</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/support" title="">Support</a></li> <li class="last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about" title="">About</a></li> </ul> </div> </div> </div> </div> </nav> </header> <main id="main-content"> <div class="wrap" id="top"> <div class="breadcrumbs"><a href="/web/20230331172033/https://www.hesa.ac.uk/about">About us</a> » <a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation">Compliance and regulation</a> » <a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection">Data protection</a> » <a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/guidance" class="active">Data protection guidance for the HESA records</a></div> <h1>Data protection guidance for the HESA records</h1> <ul class="action-links"></ul> <div class="region region-content"> <div id="block-system-main" class="block block-system"> <div class="content"> <div class="grid grid-spaced"> <div class="content-aside | col-1/3 | col-reverse"> <div class="accordion-item"> <nav class="nav-sub" aria-label="Section sub-navigation"> <a href="#after-nav-sub" class="element-invisible element-focusable">Skip sub-navigation</a> <a class="accordion-toggle | toggle-nav-sub" href="#nav-sub-content" aria-controls="nav-sub-content" aria-expanded="false" role="button">Also in this section</a> <div class="js-accordion-content | nav-sub-content" id="nav-sub-content"> <ul class="menu"><li class="first last expanded active-trail"><a href="/web/20230331172033/https://www.hesa.ac.uk/about" title="" class="active-trail">About us</a><ul class="menu"><li class="first leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/contact">Contact and find us</a></li> <li class="expanded"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/engage">Engage with us</a><ul class="menu"><li class="first last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/provider-forum" title="">Provider forum</a></li> </ul></li> <li class="expanded"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/what-we-do">Who we are and what we do</a><ul class="menu"><li class="first leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/what-we-do/designated-data-body">Designated Data Body for England</a></li> <li class="last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/what-we-do/statutory-w-s-ni">Wales, Scotland and Northern Ireland</a></li> </ul></li> <li class="expanded active-trail"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation" class="active-trail">Compliance and regulation</a><ul class="menu"><li class="first expanded active-trail"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection" class="active-trail">Data protection</a><ul class="menu"><li class="first expanded"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/notices">Collection notices</a><ul class="menu"><li class="first leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/notices/previous">Collection notices (historical)</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/data-protection/notices/dlhe-c14018">Collection notice (DLHE C14018)</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/notices/dlhe-c15018">Collection notice (DLHE C15018)</a></li> <li class="last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/notices/dlhe-c16018">Collection notice (DLHE C16018)</a></li> </ul></li> <li class="expanded active-trail"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/guidance" class="active-trail active">Data protection guidance for the HESA records</a><ul class="menu"><li class="first leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/guidance/LDLHE-faqs-graduates" title="">Frequently asked questions for HE leavers 2010/11 survey</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/guidance/LDLHE-faqs-providers" title="">Frequently asked questions for HE providers 2010/11 survey</a></li> <li class="last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/guidance/LDLHE-agreement" title="">Data protection agreement between HESA and IFF Research</a></li> </ul></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/register">Data sharing register</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/rounding-and-suppression-anonymise-statistics">Rounding and suppression</a></li> <li class="last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/ucas-data">HESA's processing of UCAS data</a></li> </ul></li> <li class="expanded"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/official-statistics">Official statistics</a><ul class="menu"><li class="first expanded"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/official-statistics/pre-release">Pre-release access to official statistics</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/official-statistics/confidentiality">Statistical confidentiality policy</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/official-statistics/revisions">Revisions policy</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/official-statistics/engagement-strategy" title="HESA user engagement strategy for statistics">User engagement strategy</a></li> <li class="last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/official-statistics/quality-report">Student record quality report</a></li> </ul></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/foi">Freedom of information</a></li> <li class="last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/regulation/complaints">Complaints</a></li> </ul></li> <li class="expanded"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/working-here" title="">Working here</a><ul class="menu"><li class="first last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/working-here/vacancies" title="">Current vacancies</a></li> </ul></li> <li class="last expanded"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website">Website and accessibility</a><ul class="menu"><li class="first leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website/site-map" title="">Site map</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website/terms">Terms of use</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website/accessibility">Accessibility statement</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website/cookies">Cookies</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website/privacy">Privacy</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website/eduroam">eduroam</a></li> <li class="last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website/esignatures">HESA's use of electronic signatures</a></li> </ul></li> </ul></li> </ul> </div> </nav> </div> </div> <div class="content-main | col-2/3" id="after-nav-sub"> <h3><strong>Introduction </strong></h3> <p>(Version 8.3, June 2019)</p> <p>We have drawn together this guidance to provide more information about the effect of Data Protection legislation on the processing of student and staff data by HESA. It is not intended as a guide to the GDPR or the Data Protection Act 2018.</p> <h3><strong>New subscriber to HESA?</strong></h3> <p>If you are submitting student data from a <strong>Further Education Institution in Wales funded by HEFCW</strong> please read <a href="http://web.archive.org/web/20230331172033/https://www.hesa.ac.uk/files/FE_institutions_in_Wales_Data_Protection_Guidance_2016.pdf">this</a>.</p> <p>Contents</p> <ol class="ol"> <li><a href="#about">About HESA</a></li> <li><a href="#personaldata">Personal Data in the HESA records</a></li> <li><a href="#sensitive">Sensitive personal data/Special categories of personal data</a></li> <li><a href="#notices">Collection Notices</a></li> <li><a href="#survey">Graduate outcomes survey</a></li> <li><a href="#obligation">Obligations of HE providers to provide data to HESA</a></li> <li><a href="#faqs">Frequently Asked Questions</a></li> </ol> <h4><a id="about" name="about"><strong>1. About HESA </strong></a></h4> <p>HESA (Higher Education Statistics Agency Limited) is the official agency for the collection, analysis and dissemination of quantitative information about higher education (HE) in the UK, and the Designated Data Body for England.</p> <p>HESA collects information from higher education providers in the UK at the request of its <a href="http://web.archive.org/web/20230331172033/http://www.hesa.ac.uk/about/what-we-do/statutory-customers">Statutory Customers</a>.</p> <p>HESA and its Statutory Customers are Controllers of the HESA records under GDPR. HESA's ICO registration number is Z7475057. HESA’s wholly-owned subsidiary company HESA Services Limited may also act as a Controller of the data and provides anonymous or pseudonymised data extracts for research purposes. HESA Services Limited’s ICO registration number is Z7899462. All uses of personal data collected by HESA are described in the Collection Notices at <a href="http://web.archive.org/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/notices">www.hesa.ac.uk/about/regulation/data-protection/notices</a>.</p> <p><a id="personaldata" name="personaldata"><strong>2. Personal Data in the HESA records</strong></a></p> <p>The following HESA Records include personal data as defined in the GDPR:</p> <ul> <li>Student record</li> <li>Student Alternative record</li> <li>Initial Teacher Training In-Year collection (HE providers in England only)</li> <li>Destinations of Leavers from Higher Education (DLHE) survey (final data collection 2016/17)</li> <li>DLHE Longitudinal survey (final data collection 2012/13)</li> <li>The Graduate Outcomes survey (first collection 2017/18)</li> <li>Staff record.</li> </ul> <p>A full list of data fields collected in each data collection can be found via the <a href="http://web.archive.org/web/20230331172033/https://www.hesa.ac.uk/collection">Data collection</a> section of the HESA website.</p> <p>The lawful basis under GDPR for collecting personal data and for each processing purpose is described in the relevant <a href="http://web.archive.org/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/notices">Collection Notice</a> as required by GDPR Article 13.</p> <h4><a id="sensitive" name="sensitive"><strong>3. Special categories of personal data</strong></a></h4> <p>Certain categories of data are specified as ‘Special categories of personal data' under GDPR. These are subject to stricter conditions of processing. The following data fields in the HESA record capture sensitive or special categories of personal data:</p> <ul> <li>Disability</li> <li>Ethnicity</li> <li>Gender Identity</li> <li>Religion or belief</li> <li>Sexual orientation</li> </ul> <p>Collection of these sensitive or special categories of data is necessary for statistical research purposes to help public authority data controllers to meet their public-sector equality duties under the Equality Act 2010. This processing is lawful under GDPR Article 9(2)(j).</p> <h4><a id="notices" name="notices"><strong>4. Collection Notices</strong></a></h4> <p>Articles 13 and 14 of the GDPR require data controllers to provide information to data subjects that identifies data controllers and describes their purposes for processing personal data, including transfers and disclosures to other data controllers. HESA’s Collection Notices provide this information for students, staff and graduates on behalf of HESA, HESA Services Limited, and the other organisations who are Controllers of HESA datasets.</p> <p>The Collection Notices are published at <a href="http://web.archive.org/web/20230331172033/https://www.hesa.ac.uk/about/regulation/data-protection/notices">www.hesa.ac.uk/about/regulation/data-protection/notices</a>.</p> <p>HE providers must inform students and staff that their personal data will be submitted to HESA and must make the HESA Collection Notices available to all relevant data subjects. HESA recommend that HE providers include a link from their own privacy notices to the HESA Collection Notices.</p> <h4><a id="survey" name="survey"><strong>5. Graduate outcomes survey</strong></a></h4> <p>The Student Collection Notice informs students that their contact details will be used to undertake surveys of graduate outcomes. Further information about the use of survey responses is provided before the survey starts.</p> <p>Specific data protection guidance in relation to the Graduate Outcomes survey can be found here: <a href="http://web.archive.org/web/20230331172033/https://www.hesa.ac.uk/innovation/outcomes/providers/data-protection">www.hesa.ac.uk/innovation/outcomes/providers/data-protection</a>.</p> <h4><a id="obligation" name="obligation"><strong>6. Obligations of HE providers to provide data to HESA</strong></a></h4> <p>Various pieces of legislation include obligations on HE providers to provide information to government departments, funding and regulatory bodies, and other public authorities. Organisations with a statutory requirement to receive data from HE providers are referred to as HESA's 'Statutory Customers'.</p> <p>In <strong>England </strong>The Higher Education and Research Act 2017 (HERA) establishes the Office for Students (OfS) and requires it to establish and maintain a register of English higher education providers. HE Providers are required by OfS to provide information to HESA under section 79(c) of the Further and Higher Education Act 1992 and the Education (Prescribed Courses of Education) (Information Requirements) (England) Regulations 2015, SI 2015/225.</p> <p>From 1 August 2019 these obligations will be replaced by Section 8 of HERA which requires that the ongoing registration conditions include -<br/> (b) a condition that requires the governing body of the provider to provide the OfS, or a person nominated by the OfS, with such information for the purposes of the performance of the OfS’s functions as the OfS may require it to provide, and<br/> (c) a condition that requires the governing body of the provider to provide a designated body with such information for the purposes of the performance of its duties under sections 64(1) and 65(1) (compiling, making available and publishing higher education information) as the designated body may require it to provide.</p> <p>Section 22 of the Further and Higher Education (<strong>Scotland</strong>) Act 2005 requires HE providers in Scotland to provide the Scottish Further and Higher Education Funding Council with “such information as it may reasonably require for the purposes of or in connection with the exercise of any of its functions.”</p> <p>Section 27 of the Higher Education (<strong>Wales</strong>) Act 2015 obliges the Higher Education Funding Council for Wales (HEFCW) to “publish a code relating to the organisation and management of the financial affairs of regulated institutions”. This Financial Management Code in turn requires HE providers in Wales to provide information to HEFCW as it reasonably requires.</p> <p>Section 30 of the Education and Libraries (<strong>Northern Ireland</strong>) Order 1993 permits the Department of higher education (currently the Department for the Economy) to “obtain such advice and other services as it considers necessary or desirable from any other body or person on such terms and conditions as may be agreed between the Department and that other body or person.”</p> <p>Schedule 12 of the Education Act 2002 requires that all Initial Teacher Training (ITT) students at HEIs in England are provisionally registered with the General Teaching Council for England (GTCE). The ITT in-year collection, administered by HESA, is the centralised mechanism for HEIs to submit details of ITT students to the Teaching Regulation Agency (TRA - the successor body to GTCE) for this purpose.</p> <p>Agreements, codes or memoranda between funding or regulatory bodies and HE providers specify that information requirements are fulfilled through submission of data to HESA.</p> <p>It is a condition of Designation for Teach Out from the OfS, or Limited Designation from the OfS, that providers must provide HESA with such information as HESA specifies at the time and in the manner and form specified by HESA, and meet the costs of such submission, including any associated subscription costs that HESA may determine.</p> <h4><a id="faqs" name="faqs"><strong>7. Frequently Asked Questions</strong></a></h4> <p><strong>What happens to data after it reaches HESA?</strong></p> <p>Once data has been submitted by HE providers, it is processed into a form suitable for each Statutory Customer. Population indicators and other fields are derived from the core data to aid analysis. Each Statutory Customer receives the data necessary for their statutory functions, which in some cases is a subset of fields or records from the total submission. HESA also retains the full dataset for the uses described in the Collection Notices.</p> <p><strong>How are records decided?</strong></p> <p>Each HESA record is subject to a regular review, and may be further amended to satisfy Statutory Customer initiatives in between planned reviews. Changes to records are mostly prompted by the needs of Statutory Customers or the desire to improve data quality, and are subject to extensive consultation with all parties concerned including the HE providers. All the data protection principles are borne in mind during the record review process.</p> <p><strong>Is the collection of all the data necessary?</strong></p> <p>Every item of data collected by HESA is needed either by a Statutory Customer or to aid the collection process. Some data items are used in the derivation of datasets for Statutory Customers and then not processed further. The requirement for individual items of data is regularly reviewed as part of the record review process.</p> <p><strong>Why collect unique individual identifiers if records are never looked at individually?</strong></p> <p>Collection of individual identifiers is essential both to aid the collection process and to allow the Statutory Customers to carry out their functions effectively. These include the tracking of students and staff in HE providers to produce accurate progression and participation statistics.</p> <p><strong>Why are student names collected?</strong></p> <p>Student names are needed to ensure the data collection process runs smoothly. Actual names are supplied to Statutory Customers for record linking and in support of audit processes. Names within the HESA Student record are not used to make direct contact with students. Access to names within HESA and its Statutory Customers is restricted only to essential staff who have received appropriate training in data protection.</p> <p>For the Graduate Outcomes survey HE providers will provide the names and contact details of graduates to HESA in order to perform the survey.</p> <style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><style type="text/css"> </style><p></p> <style type="text/css"> </style></p> <style type="text/css"> </style> </div> <div class="content-aside | col-1/3 | col-reverse"> </div> </div> </div> </div> </div> <div class="cms-controls"> <ul class="action-links"></ul> </div> </div> </main> <footer role="contentinfo" class="footer-site"> <div class="banner"> <div class="wrap"> <div class="grid | grid-spaced | grid-2-cols"> <div> <div class="region region-footer-menu"> <div id="block-menu-menu-footer-menu" class="block block-menu"> <div class="content"> <ul class="menu"><li class="first leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about" title="">About us</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/working-here" title="">Working here and vacancies</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/innovation/data-futures" title="">Data Futures</a></li> <li class="last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/services/heidi-plus" title="">Heidi Plus</a></li> </ul> </div> </div> </div> </div> <div> <div class="region region-social-links-menu"> <div id="block-menu-menu-social-links-menu" class="block block-menu"> <div class="content"> <ul class="menu"><li class="first leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/contact" title="">Contact/find us</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/news" title="">Latest news and blogs</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/support" title="">Support materials</a></li> <li class="last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/services" title="">Data analytics</a></li> </ul> </div> </div> </div> </div> </div> <div class="grid grid-spaced grid-2-cols"> <div> <div class="footer-meta"> <div class="region region-legal-footer-menu"> <div id="block-menu-menu-legal-footer-menu" class="block block-menu"> <div class="content"> <ul class="menu"><li class="first leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website/site-map" title="">Site map</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website/terms" title="">Terms of use</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website/accessibility" title="">Accessibility</a></li> <li class="leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website/cookies" title="">Cookies</a></li> <li class="last leaf"><a href="/web/20230331172033/https://www.hesa.ac.uk/about/website/privacy" title="">Privacy</a></li> </ul> </div> </div> </div> </div> </div> <div> <div class="social"> <h4>Connect With Us:</h4> <a href="http://web.archive.org/web/20230331172033/https://twitter.com/ukhesa" class="follow-twitter"> <img src="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/img/icon-twitter.svg" alt="Twitter"> </a> <a href="http://web.archive.org/web/20230331172033/https://www.linkedin.com/company/higher-education-statistics-agency" class="follow-linkedin"> <img src="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/img/icon-linkedin.svg" alt="LinkedIn"> </a> </div> <figure class="footer-site__logos"> <a href="http://web.archive.org/web/20230331172033/https://www.jisc.ac.uk/"> <img src="/web/20230331172033im_/https://www.hesa.ac.uk/sites/all/themes/hesa/img/logo-jisc.png" alt="Part of Jisc"/> </a> </figure> </div> </div> </div> </div> </footer> <span class="footer-ident"></span> <script type="text/javascript" src="http://web.archive.org/web/20230331172033js_/https://ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js"></script> <script type="text/javascript" src="http://web.archive.org/web/20230331172033js_/https://www.hesa.ac.uk/files/js/js_DRszCILfNteakMtA9IaG5VfXMgclPUg36cL1gyTDqJk.js"></script> <script type="text/javascript" src="http://web.archive.org/web/20230331172033js_/https://www.hesa.ac.uk/files/js/js_llyw5VQhyqjUFjFU3io3JXNCJnPS-gHPikTyooRDQkA.js"></script> <script type="text/javascript" src="http://web.archive.org/web/20230331172033js_/https://www.hesa.ac.uk/files/js/js_kues2zzvQLidKOYpIlUW_RRunHMU5orRYqAyHv4H3zs.js"></script> <script type="text/javascript"> <![CDATA[//><!]]> </script> <script type="text/javascript"> <![CDATA[//><!]]> </script>  <script src="http://web.archive.org/web/20230331172033js_/https://use.typekit.net/qsa5zsm.js"></script> <script>try{Typekit.load({ async: true });}catch(e){}</script> <script type="text/javascript"> <![CDATA[//><!]]> </script> <script src="/web/20230331172033js_/https://www.hesa.ac.uk/sites/all/themes/hesa/js/plugins.min.js"></script> <script src="/web/20230331172033js_/https://www.hesa.ac.uk/sites/all/themes/hesa/js/app.min.js"></script> </body> </html>