Under the Data Protection Act 1998 Durham University is required to notify the Information Commissioner of the purposes for which it processes personal data. This notification is renewed annually and recorded in the Data Protection Public Register. The University's Registration Number is Z5704339.
The University must ensure that its notification remains up-to-date. Staff must not therefore process personal data unless the activity is covered by the current notification. Any member of staff who wishes to carry out additional processing must contact Sophie Philipson, the University's Information Governance Manager, prior to doing so. Additional processing includes:
- processing personal data for an additional purpose
- collecting an additional class of data
- collecting personal data from an additional data subject
- disclosing personal data to an additional recipient