Information requesters privacy policy

As a data controller and a public authority, the university has a legal obligation to provide access to information under the applicable legislation. This includes the GDPR, Data Protection Act (DPA) and Freedom of Information Act (FOIA).

The data you provide will be used so that you are able to exercise your lawful data subject rights under the relevant legislation. We may be required to share the data with the relevant departments/employees who may hold the data you require to enable us to respond to your request.

The university treats all requests for information under the FOIA as public disclosures. As such any personal data you may provide us with will only be used in exceptional circumstances when responding to these requests.

Once a request has been completed, the relevant data will be held by the Information Governance Team for three years in line with ICO guidance, this is to ensure the University has fully carried out its requirements under the legislation.

For further information on how we process personal data, please see our data protection web pages