Data protection at Norwich University of the Arts
Data protection legislation protects the rights of individuals when we process their data. We collect and manage personal information in a way that complies with the University’s Data Protection Policy and with the Data Protection Act (DPA) and General Data Protection Regulation (GDPR).
Advice and guidance on aspects of data protection is available from our Data Protection Officer, Sue White, at firstname.lastname@example.org
Data Protection law is changing under the new General Data Protection Regulation (GDPR) effective 25th May 2018. It places greater obligations on how organisations handle personal data and extends individuals rights regarding their personal data.
More information on how we collect and use personal information can be found in the relevant Privacy Notice.
Further information relating to Data Protection and your individual rights
View the University’s information governance policies below.
The University needs to collect and process personal information in order to provide services, manage its operations effectively, and meet legal requirements. We have a responsibility under data protection legislation to provide individuals with information about how we process their personal information. These privacy notices describe the ways we will collect, use and share personal information.
The Higher Education Statistics Agency (HESA) is the official agency for the collection, analysis and dissemination of quantitative information about higher education in the UK. On 4 October 2022 HESA merged with Jisc. HESA is now part of Jisc, a not-for-profit company limited by guarantee, registered in England (company number: 05747339; charity number: 1149740). This means that Jisc is now the data controller for all data sent to HESA.
The following notices explain why personal data has to be transferred to HESA/Jisc and what is done with your personal information after it has been submitted by the University:
The Collection Notices also contain the contact details for HESA/Jisc for access requests to your information which is held by HESA/Jisc.
Request for personal information
Individuals have a right of access to their own personal data held by us. A request for all such information is called a Subject Access Request. If you wish to make a request please complete the form below. Guidance on how to complete and return the form is provided.
Top 10 for
by the Times and Sunday Times 2022
Top Two UK
by The Complete University Guide 2023
for Student Retention -
The Times and Sunday Times 2020