Heriot-Watt University is legally obliged to process personal data in accordance with the Data Protection Act, 1998, and has a duty of care to all of its data subjects (people whose personal data we hold). Misuse of personal data by employees, including accidental or deliberate loss or disclosure to third parties, puts the University at legal and reputational risk and is likely to result in disciplinary action.

see also: personal, policy, protection

The University needs to obtain and process certain information about its students to allow it to register students and organise courses as well as other activities. This information is collected and used fairly, stored safely and not disclosed to any other person unlawfully. If you have any questions about our Data Protection procedures, please consult our policy.

see also: policy, protection

In order to balance the need to enable access to and protect confidential information the University has developed the REALISM project - Real Information Security Management. This project aims to identify and protect confidential information held by the University and ensure that staff who are authorised to use it can do so, securely, with confidence.

see also: armms, information, it, realism, security

Still and moving images and sound recordings featuring identifiable individuals contain personal data of these individuals and must be managed in accordance with the Data Protection Act, 1998. When processing still and moving images for promotional, journalistic and archival purposes the University will need to rely on these guidelines.

see also: consent, image, photography, protection, recording

A member of staff wishing to see the personal information that Heriot-Watt University holds about them can submit a request on this form. The completed form together with proof of identity and a statutory fee must be submitted to the Human Resources Manager.

see also: protection