Heriot-Watt University is legally obliged to process personal data in accordance with the Data Protection Act, 1998, and has a duty of care to all of its data subjects (people whose personal data we hold). Misuse of personal data by employees, including accidental or deliberate loss or disclosure to third parties, puts the University at legal and reputational risk and is likely to result in disciplinary action.

see also: data, policy, protection