Releasing information to parents and third parties
The Data Protection Act protects individuals’ rights with regards to their personal data, regulating the information that can be held, how it is processed and to whom it can be disclosed. When a student registers at the University they sign and accept our Data Protection Notice, this outlines the main ways in which the University will process a student’s personal data. Normally personal data will only be disclosed to third parties if the disclosure is the purpose for which the data was collected and provided the data subject is aware, or would reasonably expect the release.
Confirming/denying that an individual is a student here would infringe the DPA and may, in extreme circumstances, result in placing an individual in danger. However, we do understand that parents may be concerned about their son/daughter and will happily discuss University procedures ie explain examination procedures, discuss the implications of failing a module, accommodation costs etc.
If a student has given us consent to discuss a certain matter with a third party then we will happily do so.
In some circumstances you may have major concerns (eg have not heard from your son/daughter for months), in these cases if you leave contact details/correspondence with us, should the individual be a student here we will endeavour to pass them on and encourage the student to make contact. If the individual is not a student the details will be securely destroyed.
There may occasionally be exceptional circumstances (life or death situations) in which the usual need to obtain consent before disclosing information may be waived. In these circumstances the University would disclose information to a nominated emergency contact, provided by students at registration. If an enquirer claims to have a legal right to the information we would assume that they represent an official organisation which is fully aware of the Data Protection Act and which has its own code or procedures. We would therefore not expect any objection to a small delay in providing the information while we check credentials and the claimed right of access.