Transfer of Personal Data - within the University
The University is treated as a single corporate organisation from the Data Protection viewpoint. However, personal data may only be transferred within the University under the following conditions:
the recipient of the personal data is a member of staff of the University; and
the recipient has a legitimate and authorised requirement to receive & process the data; and
the recipient's processing of the personal data is consistent with the original purpose stated for collecting the personal data; and
the recipient is advised that they must not transfer the personal data elsewhere unless authorised.