Data protection and social media
Social media is an important tool for staff and students but use must comply with data protection laws.
Social media provides important opportunities for staff and students to communicate and engage with a wide range of audiences and stakeholders. There are, however, a number of data protection risks associated with the use of social media which could impact on the University’s reputation.
These guidelines complement existing policies and guidance from Human Resources and Information Services.
Human Resources, in consultation with key stakeholders, has recognised the benefits of social media the University and endorsed the use of social networking for positive engagement within our working environment and as a communication tool to share important news, updates and events. The statement can be found here:
Information Services have developed guidelines to ensure that use of social media are used safely and responsibly. These guidelines can be found here:
Social media and research
Harvesting social media posts for research
Many research projects involve harvesting and analysing social media posts. While many of these will be in the public domain, the data protection requirements must still be adhered to. This means that the authors of the social media posts must be provided with a privacy notice within one month after harvesting them. That can be through, for example, a tweet to them. The same applies to all research using publicly available data – you still have to adhere to the fairness principle and provide a privacy notice.
Tagging individuals when creating posts
You can tag individuals when creating social media posts as a person who has created a Twitter or public Facebook account will have acknowledged at the time of creating their account what can and can’t be done. However, you should only do this where the individual is unlikely to object to being tagged/associated with the post. You should not add or create any further identifiable or personal data about the individual that is not already publically available without the individual’s consent.
Social media and marketing
It is not acceptable to link to individuals' personal data (such as graduates’ publicly available Linked In profiles) to market programmes. Although an individual’s Linked In profile is publicly available, you cannot create any marketing materials that link to these profiles (which contain personal data) without the individual’s consent.
You can publicise staff or student successes on your School social media site. Your legal basis will be legitimate interest and specific consent is not required, however if you are publishing a photograph of the individual, then consent for use of the photograph will be required (if not already obtained as part of staff/student photograph use).