Data Protection Policy and Guidelines

Please note that the statements on Responsibilities of Staff, and on Responsibilities of Heads of Department, are on the Information Law web pages, since they refer to responsibilities under both the Data Protection Act and the Freedom of Information Act.

These web pages provide information for students and staff of Goldsmiths College on their rights and obligations arising from the Data Protection Act (1998), and from the College's internal policies designed to implement the Act.

Some of the information provided will also be relevant to those outside Goldsmiths who may have rights of access to personal data controlled by the College, whether as a Data Subjects or as a Third Party.

Those who are not yet familiar in general with the provisions Data Protection Act are advised to read the following pages before seeking to resolve any more detailed queries which they may have:

• Introduction
• College's notification
• Data collection & processing
• Responsibilities of individual staff (link to Information Law pages)

Anyone who has any queries about the Policy is invited to send an email to the Data Protection Officer. However, to make a formal Data Subject Access Request the specific guidance page on Data subject access requests should be consulted.

Responsibility for the implementation of the Data Protection Act in the College rests with the College Council. Council has approved a Management Framework for Compliance with Information Law, assigning responsibilities to designated officers of the College, and defining in general terms the responsibilities of Heads of Department and individual staff members. This Framework also defines the role of these web-based Data Protection Policy and Guidelines and the means by which they are kept up to date. The Management Framework document is available for downloading in PDF format.