Privacy procedures

Data Protection Policy and underpinning codes of practice:

Data Protection Policy

Code of Practice for Collecting & Processing Personal Data - responsibilities of staff

Code of Practice for Distribution of or Access to Personal Information - responsibilities of staff

Code of Practice for Disclosure of Information - responsibilities of staff

Code of Practice for Marketing to Data Subjects - responsibilities of staff

Consent procedure - responsibilities of staff

Code of practice for protection of images and sound - responsibilities of staff

Photographic and Audio-Visual Consent Form template for use by staff who need to gain consent for photography or other audio-visual work from participants.

Guidance on anonymising data

Privacy impact assessments - when staff should complete them, and a template form

Record of Processing Activities:

Data Processing Activities Register - listing the University's processes, with legal bases where personal data is concerned

Privacy Notices

Agreements templates for Staff use:

Data Processor Agreement template - for staff use

Data Sharing Agreement template for use within the EEA - for staff use

Data Sharing Agreement template for use outside the EEA - for staff use

What Staff should do in the event of a data incident or breach:

Data Incident & Information Security Incident Policy

Guidance for Staff on classifying data / records, and what to do in certain circumstances - where to keep data, how to transfer it:

Data Classification Policy & Information Handling Procedures

In this section