Lancaster University Data Protection
Project 2000-01

Project Guidelines

Introduction

The  focus of the Project is to develop detailed ‘themed’ guidelines e.g. counselling services, admissions, alumni etc. to be co-ordinated with the current JISC Code of Practice. These will usually be produced in the following format:

1. A background description of relevant processes and a list of those elements of the law we think are particularly pertinent.
2. A top-level statement of recommended practice. A general statement of processes and issues including Dos and Don’ts and ‘anything else we think you should consider’.
3. Sample pro formas where appropriate, e.g. registration form.
4. Responses to frequently asked questions and worked examples of best practice.

On occasion a key issue of general principle has been raised that is relevant to the sector is not activity-specific, and has not been covered in depth in JISC CoP. In these instances we will consult with the Office of the Information Commissioner and publish general advice (Discussion Papers).

Below is a list of the discussion papers and ‘themed’ guidelines that have been produced  by the Project.

Guidelines may be accessed for viewing and/or download as a Word document by clicking on the guideline. We have  added dates to guidelines to make it clear which version is currently online. Subsequent additions/alterations to the guidelines will also be dated.

Following the advice contained within the guidelines that have been reviewed and agreed by the OIC can be no guarantee of total compliance with the Data Protection Act 1998. However whether the guidelines have been followed by a data controller will be an important factor in any request for assessment that might be made by the OIC as to whether specific processing complies with the Act.

Discussion Papers

1. What are the responsibilities of Higher Education Institutions (HEIs) as Data Controllers?:     06/08/01 updated 14/05/02

'The material contained on this site is intended as a guide to Higher Education Institutions (HEIs) in the UK in complying with the Data Protection Act 1998. As such, it may be reproduced or adapted for use by HEIs. It is not intended and should not be treated as legal advice. The University of Lancaster can accept no liability in negligence or otherwise to those who rely directly or indirectly on any statements contained on this site.'

Webmaster:  Malcolm Baldwin
Revised: 05 Nov 2003 10:42 .