Policies and Procedures

Data Protection

Data Protection Policy (92Kb MS Word)

The Data Protection Act (DPA) 1998 aims to ensure personal privacy, through giving individuals rights to information held about them, and by placing responsibility onto the organisations who process this information.

The DPA regulates how information about living individuals may be collected, used, retained and disclosed by the University.  The Information Commissioner (IC) oversees the DPA, and the University is required to register with the IC Office on an annual basis.

The University of Gloucestershire is obliged to comply with the Data Protection principles set out in the Act.  These require data to be

• fairly and lawfully processed
• processed for limited purposes
• adequate, relevant and not excessive
• accurate and up to date
• not kept longer than necessary
• processed in accordance with the individual's rights
• secure
• not transferred to countries outside the European Economic area unless the country has adequate protection for the individual

Under the DPA 1998 all personal data processed by the University is covered, including paper records as well as those held on computer, video, CCTV and other mediums.

The Act entitles individuals to request access to any personal data that the University is holding about them. These requests are known as Subject Access Requests, and should be made in writing to the Data Protection Officer at the address below.  Click here to download a Word version of the Subject Access Request Form.

Staff Guidelines for Good Practice and Frequently Asked Questions

Full details of the requirements of the Act may be found at the web site of the Information Commissioner's Office.

For further information about Data Protection, please contact

Data Protection Officer
Academic Registry
University of Gloucestershire
Park Campus, Cheltenham
Gloucestershire, GL50 2RH

Email: dataprotection@glos.ac.uk