Search results
Found 6431 matches for
Madeleine Oliver is a 5th year medical student, originally from London. Like many other medical students Madeleine volunteered to help out with the fight against COVID-19. She spoke to us about what it’s been like working on the frontline with doctors, nurses and patients at the hospital.
I want to ...
Frequently asked questions about Data Privacy
Data Protection Principles
The University's guidance on the principles of Data Protection
How to report a data breach
Please follow the University procedure for reporting a data breach as soon as possible.
How to handle a subject access request
If you receive a subject access request you should forward it promptly to the Information Compliance Team, as we are required to respond to requests within a statutory timeframe.
Photography Toolkit
The University's GDPR toolkit for photography
Standard University Privacy Notices
Privacy Notices for Staff, Students, Alumni etc
Guidance on writing a Privacy Notice
University guidance on how to write a Privacy Notice - for personal data not covered by the standard University privacy notices
University: official lawful basis guidance
University guidance on how to determine the lawful basis for processing personal data.
How to carry out a legitimate interests assessment
The University's guide to determining whether legitimate interest can be used as a lawful basis for processing (includes links to templates and examples)
Using consent as a lawful basis for processing
The University's guidance on when and how to use consent as a lawful basis for processing
Research Services: lawful basis guidance for research projects
Research Services guidance on selecting a lawful basis for research. It isn't possible to link directly to the relevant information, please go to: Lawful - selecting a lawful basis for the processing of personal data
Health Research Authority advice on Consent in Research
This link is provided as a very clear outline and contrast of the use of consent under GDPR and the common law duty of confidentiality, and is included here for clarification if things are getting confusing. Please use Research Services Guidance in the first instance.
Consent under the Common Law Duty of Confidentiality
A useful link to the Department of Health guidance on consent under the common law. It is important not to confuse this with consent as a basis for processing under the GDPR. This link is included as a good starting point if things are getting confusing - please check the Research Services advice on this.
Haiku Website Privacy Notice Template
An example of a privacy notice for Haiku websites
Participant Information Sheet Template for Research under CTRG
If you are undertaking research under the auspices of the CTRG, your Privacy Notice will be incorporated into your Participant Information Sheet.
Participant Information Sheet Template for Research under Med Sci IdREC
Privacy notices for research projects under the auspices of Medical Sciences IdREC are incorporated into this participant information sheet.
University Mailing List Guidance
Advice on the action you need to take in relation to mailing lists as a result of the GDPR
Using Consent as a Lawful Basis for Processing
If you are sending marketing emails (see the guidance on mailing lists), you may, under some circumstances, need to use consent as your lawful basis for processing. The GDPR sets a very high standard for valid consent, which must be specific, informed, freely given and unambiguous.
GDPR Information about our Adestra account (on Sharepoint)
We are currently maintaining information about Adestra on the Comms and PE Network Sharepoint site