The Data Protection and Freedom of Information Office provides the University with advice, expertise, and training on the implications for the University of the Data Protection Act [DPA], the Privacy & Electronic Communications Regulations [PECR], the Freedom of Information [Scotland] Act [FOISA], the Environmental Information [Scotland] Regulations [EIRs], the Section 61 Code of Practice on Records Management, and associated legislation. In particular, the Office:
- Processes all the Subject Access Requests made to the University under the DPA.
- Processes, or provides coordination & advice on, those FOISA Requests made to the University where the Act's exemptions are invoked.
- Processes non-routine requests for information that are subject to the terms of FOISA.
- Provides the administrative structure for all the Requests for Review received by the University under FOISA.
- Coordinates all contact between the University and both the Scottish Information Commissioner and the UK Information Commissioner - including Investigations, Appeals, Notifications, and the Publication Scheme.
- Makes policy recommendations to the University in those areas of operation where the requirements of the DPA, FOISA, EIRs, and other information compliance issues impact.
- Makes policy recommendations to the University on records and information management practices and procedures including record retention schedules.
- Provides specialist advice in the areas of records and information management to meet the University's strategic initiatives and projects.
- Provides training courses on the practices required to meet the requirements of the above legislation.
- Provides detailed advice, on request, on the implications and requirements of the above legislation.
- Coordinates contact with the University's Lawyers on issues related to the above legislation.
- Provides web pages on the implications and requirements of the above legislation.
- Responds to all DPA Subject Access Requests and FOISA Information Requests within the timescales required by the Acts.
- Updates, maintains, and seeks to develop the University's Publication Scheme [FOISA] and Notification [DPA].
Complaints and comments on the above services provided to the University should be directed in the first instance to the Data Protection and Freedom of Information Office .