Data Protection

Under the Data Protection Act 2018 and GDPR, we have a legal duty to protect any personal information we collect from you. We do not pass on your details to any third party or government department unless you give us permission to do so or the law requires/permits it.

As a data controller we have to notify the Information Commissioner of the types of personal information we process and for what purpose we use it for and whom we share it with. The Information Commissioner's Office is the UK's independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

You can see what is recorded on our Data Protection Notification entry if you search for the University of Derby on the Information Commissioners Website notification number Z859984X.

We use and share your personal information in order to identify, plan, deliver and monitor services that we provide to you. We respect everyone's right to privacy and we are fully committed to the principles of the Data Protection Act 2018 and GDPR.

Please be aware that we are currently following the ICO's guidance during the Coronavirus (COVID-19) pandemic.  Whilst we will endeavour to meet our statutory timescales, the ICO recognises that during the pandemic there may be understandable delays when making information rights requests.  Please see the ICO's guidance for more information.

Need Advice?

Contact: gdpr@derby.ac.uk or call +44 (0)1332 592151

Our Data Protection Officer is James Eaglesfield +44 (0)1332 591762
Our Deputy Data Protection Officer is Helen Rishworth +44 (0)1332 591954