Transfer of Personal Data - within the University

The University is treated as a single corporate organisation from the Data Protection viewpoint. However, personal data may only be transferred within the University under the following conditions:

• the recipient of the personal data is a member of staff of the University; and

• the recipient has a legitimate and authorised requirement to receive & process the data; and

• the recipient's processing of the personal data is consistent with the original purpose stated for collecting the personal data; and

• the recipient is advised that they must not transfer the personal data elsewhere unless authorised.