Records Management

What is data protection?

The Data Protection Act 1998 applies to information about individuals ("personal data"). It sets out the requirements for handling personal data and gives individuals the right to access information that the University holds about them.

The eight data protection principles

The Data Protection Act sets out eight principles governing the use of personal information which we must comply with, unless an exemption applies.

Data protection definitions

Definitions of the terms used in the Data Protection Act 1998.


The University's registration with the Information Commissioner's Office (ICO) and data protection registration number.

Data security

The University has an obligation under the Data Protection Act to ensure that a framework for ensuring an adequate level of security is in place.


External websites that have useful information on data protection legislation