Data Protection
The University ensures that the personal information of its students and staff is managed in accordance with current data protection legislation. After May 25th 2018, the Data Protection Act 1998 (DPA) is superseded by the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. You can find out more about GDPR here.
Any person who believes that the University of Nottingham is holding personal information about them can apply to the University for a copy of their information by means of a Data Subject Access Request.
Links:
Forms and Information Sheets
Frequently Asked Questions
How do I make a Data Subject Access Request?
To access the personal information held on you by the University, you should submit a Subject Access Request using our Data Subject Access Request form.
If you wish to make a Data Subject Access Request, please remember that:
- Your Request cannot be processed unless we have received proof of your identity;
- You should describe the information you need as clearly as possible – if your request is too broad or unclear, we may need to ask you to be more specific;
- You should include your name and an address for a response;
- The Data Protection Act does not give a right of access to information that is not personal to yourself – that is covered under Freedom of Information and could be subject to exemption from disclosure;
- The University will aim to respond to your request within one calendar month;
For all other enquiries, you can email us at:
dpo@nottingham.ac.uk
How will my request be handled?
Please see our
Data Subject Access Requests Procedure - although this is written for University staff, applicants may also find it useful for advice on how we will handle requests for information.
Will I have to pay a fee for requesting information?
Data Subject Access Requests are free to make, however the University is entitled to charge a reasonable fee, taking into account the administrative costs of providing the information where a request is manifestly unfounded or excessive. The University will advise you if it believes that such a fee is required. If a requested fee is not paid, the University is not required to supply the requested information.
What if I am unhappy with the way my request is handled?
If you are unhappy with the way your request has been handled you can submit your complaint to the Information Compliance Team at
dpo@nottingham.ac.uk. You also have the right to complain to the Information Commissioner's Office, full details of which will be on the University's response to your SAR.