There may be occasions where UCL decides to engage the services of a third party (for example an external supplier, or contractor), that involves the processing of personal data on behalf of the university. The circumstances and purpose of sharing the personal data will determine if this is a disclosure from one data controller to another or a whether instead it amounts to a the use of a data processor.įor assistance with data transfer associated with sponsored research, please see the UCL MTA transfer guidance and the process for raising a new request, owned by Research and Innovation Services, Visit UCL Material Transfer Agreements (MTA) guidance. From time to time UCL may wish to share personal data with another organisation (another data controller). This usually sets out the legal basis for the disclosure as well as other governance arrangements such as the way the data will be shared. This requires that the disclosure is fair and lawful and usually requires that individuals are informed first and possibly consent to the disclosure.ĭata sharing agreements are sometimes used to formally document a disclosure of personal data between one or more data controllers. Disclosure and sharingĭisclosures of personal data require a legal basis and compliance with the eight data protection principles, in particular the first principle. More information and examples of who might request student information are provided below. UCL must balance the sometimes competing interests of other third parties (including families, police, local authorities, other educational establishments etc), and the right to privacy of individual students as protected by the legislation. Introduction Guidelines for the disclosure of student personal dataĪccording to data protection legislation, the circumstances under which personal information can be disclosed without the authorisation of the individual are fairly limited in practice. Solicitors Acting on Behalf of Other Persons/Bodies
Quality Assurance Agency for Higher Education (QAA) Guidelines for the disclosure of student personal data.
0 kommentar(er)
