Data Protection

The General Data Protection Regulation and the Data Protection Act 2018 regulate the use of personal data. Personal data includes all recorded information about a living, identifiable individual.  

Using Personal Data as part of your studies 

Before using personal data as part of their studies, students must: 

• Discuss implications with their supervisor 
• Seek appropriate written approval
• Comply with the responsibilities as outlined in the university’s guidance

Failure to comply with these responsibilities is an offence against University discipline and could lead to a breach of the Data Protection Laws.  

A data protection breach can cause distress to the people the information is about, and can harm relationships with research partners, stakeholders, and funding organisations.  

In severe circumstances the University could be sued for compensation, fined up to 20 million Euros, and experience reputational damage. 

University of Edinburgh data protection policy

Use of student data