GDPR

Current status: Gate 0, Initiation

Strategic Vision:

The university has a legal requirement to ensure GDPR compliance by 25th May 2018. In a nutshell, the university has to change the way in which it handles all personal data, with more emphasis on accountability, with new obligations on areas such as consent, data anonymisation, breach notification, trans-border data transfers, and appointment of a data protection officer.

Benefits:

• The avoidance of considerable fines for non- compliance
• Increased efficiency from the deletion of personal data that has past it's retention date
• Ownership of information assets
• Duture operating model to ensure on-going compliance
• The ability to continue to send direct marketing to potential students
• The avoidance of enforcement action, i.e. being prohibited from processing personal data or having data confiscated

Sponsor: Mike Shore-Ney, Registrar
Project Manager: Debbie Pope | x6236