Processing personal data on the basis of public tasks
This legal basis will apply only where the task carried out, or the authority of the controller, is laid down in Union law or UK. Thus, this is the legal basis to use for performing tasks with personal data that relate to the core functions (the reasons the University was established) of the University.
This legal basis covers data processing to perform tasks that are required to provide an education. For example data processing related to
- lecturing and tutoring
historic or scientific research
The UK Government is in the process of creating data protection legislation and subsequently, guidance from the ICO is required to clarify further how this will apply to the University. This guidance will be updated, accordingly.