The UK GDPR sets out 7 key principles, which form the core of the University’s approach to processing personal data:
Lawfulness, fairness and transparency – ensuring personal data is processed correctly
Purpose limitation – ensuring personal data is processed for specified, explicit and legitimate purposes
Data minimisation – ensuring personal data processing is adequate, relevant, and limited to the purpose.
Accuracy – ensuring personal data is correct and up to date.
Storage limitation – ensuring personal data is not kept for longer than is necessary, and is in a form to permit identification
Integrity and confidentiality (security) – safeguarding appropriate security, and authorised or lawful processing, and protecting against accidental loss, destruction, or damage
Accountability – indicating that the University takes responsibility for personal data and demonstrating its compliance.
Data subjects’ rights
The UK GDPR sets out the following rights for individuals:
Lawfulness, fairness and transparency
Integrity and confidentiality (security)
Roles and responsibilities
The University of Lincoln is a ‘Controller’ under the DPA 2018. The Board of Governors is ultimately responsible for implementing the relevant data protection legislation. Responsibility for the overall management of the implementation of the legislation rests with the University Registrar, who is the University’s nominated Senior Information Risk Owner (SIRO).
Day-to-day responsibility for implementation of the legislation is delegated to the Information Compliance Team, with the Information Compliance Officers nominated as Data Protection Officers, in accordance with the UK GDPR. They are assisted by the Information Security Manager in relation to the security of personal data.
Registration with the Information Commissioner’s Office
The University’s registration of its processing of personal information is available for inspection as part of the Public Register of Data Controllers, which is maintained by the Information Commissioner’s Office (ICO).