Data Protection and Freedom of Information in the Higher Education Sector
Produced in partnership with Sam Rose of Mills & Reeve
Practice notesData Protection and Freedom of Information in the Higher Education Sector
Produced in partnership with Sam Rose of Mills & Reeve
Practice notesThis Practice Note provides a summary of how the Assimilated Regulation (EU) 2016/679, UK General Data Protection Regulation, (UK GDPR) and the Freedom of Information Act 2000 (FIA 2000) regimes apply to the Higher Education Sector, including to universities.
It assumes the reader is familiar with key concepts under the UK GDPR, including ‘controller’, ‘data subject’, ‘personal data’, ‘processing’ and ‘processor’. For further guidance on those terms, click on the links above to navigate to the relevant section of Practice Note: Key definitions under UK data protection law. For higher-level introductions to data protection laws generally, see Practice Notes: Data protection law—new starter guide and Introduction to the EU GDPR and UK GDPR.
The UK data protection law collection collates further general guidance on the UK GDPR regime and is a recommended starting point for data protection research.
Data Protection
Data Protection Principles
The data protection regime in the UK is primarily governed by the UK GDPR and related sections of the Data Protection Act 2018 (DPA 2018). See Practice
To view the latest version of this document and thousands of others like it,
sign-in with LexisNexis or register for a free trial.