The College's Data Protection Notification Data for which the College is responsible
The Goldsmiths College Notification is based on a model Notification developed for the UK higher education sector and can be found (by typing in 'Goldsmiths' College' against 'Name', then clicking 'Search') in the online national register.
Data belonging to the College - whether it be administrative data, or research data which students or staff have collected in the course of employment or study with the College - falls within the College's Notification regardless of whether it is processed on College premises or using College computing facilities.
Activities carried out by members of the College at home, or when travelling with a laptop, may therefore fall under the College Notification; conversely some processing carried out on College premises will be the responsibility solely of the individual concerned, or of another organisation (see further below).
Data for which the College is not responsible
The following categories of data are excluded from the College Notification:
The Careers services provided to students of the College are delivered through a University of London-wide system. Data held by the central University of London office is covered by the University of London's Notification, while data in the local College Careers Office is covered by the College's Notification (even when collected and maintained by University employees).
The College Medical Centre has a separate Notification from that of the College. This has the reference number Z6080639, which can be used to locate a copy of the notification using the search facility in the online national register.
The activities of the Students' Union were covered by the College's Notification under the Data Protection Policy approved from 1 September 2004. Under the new governance arrangements for the Students' Union, the Union becomes a separate Data Controller of personal data from 1 July 2008, with its own separate Notification to the Information Commissioner.
The Goldsmiths College Notification is based on a model Notification developed for the UK higher education sector and can be found (by typing in 'Goldsmiths' College' against 'Name', then clicking 'Search') in the online national register.
Data belonging to the College - whether it be administrative data, or research data which students or staff have collected in the course of employment or study with the College - falls within the College's Notification regardless of whether it is processed on College premises or using College computing facilities.
Activities carried out by members of the College at home, or when travelling with a laptop, may therefore fall under the College Notification; conversely some processing carried out on College premises will be the responsibility solely of the individual concerned, or of another organisation (see further below).
Data for which the College is not responsible
The following categories of data are excluded from the College Notification:
- Personal data for personal and domestic use (such as, for example, addresses of personal friends) held and processed by staff and students - even if it is done using College computing facilities.
Notification is not required for this type of processing.
- Personal data processed in the course of a member of staff's activities not directly related to their employment with the College, and where this activity is likely to lead to commercial exploitation.
It is the member of staff's responsibility to ensure that there is appropriate Notification - either by registering directly with the Information Commissioner, or by ensuring that another organisation does so on their behalf. The College is not responsible for this and it would not normally be appropriate for such activities to be carried out using College computing facilities without special arrangements being made.
- Personal data processed on behalf of another organisation with which a member of staff or student is associated in a private capacity or in the course of wider academic or professional activities (eg a managing a local community group or organising a conference for a professional body or national student group) - even if it is done using College computing facilities.
Such processing will probably need to be covered by the outside organisation's Notification. Staff and students undertaking the processing should satisfy themselves that the appropriate Notification has been made, as the College cannot accept responsibility for unlawful processing of data which is not under its institutional control.
The Careers services provided to students of the College are delivered through a University of London-wide system. Data held by the central University of London office is covered by the University of London's Notification, while data in the local College Careers Office is covered by the College's Notification (even when collected and maintained by University employees).
The College Medical Centre has a separate Notification from that of the College. This has the reference number Z6080639, which can be used to locate a copy of the notification using the search facility in the online national register.
The activities of the Students' Union were covered by the College's Notification under the Data Protection Policy approved from 1 September 2004. Under the new governance arrangements for the Students' Union, the Union becomes a separate Data Controller of personal data from 1 July 2008, with its own separate Notification to the Information Commissioner.