The Information Commissioner's Office (ICO) is an independent official body. The Commissioner is responsible for administering the provisions of the Data Protection Act 1998.
Every organisation that processes, i.e. holds and uses, personal information must be registered with the UK Information Commissioner's Office (ICO), unless they are exempt. This registration is a statutory requirement under the Data Protection Act and failure to notify the ICO is a criminal offence.
The notification lists all the purposes for which the University processes personal data. This must be kept up-to-data. The entry in the register serves the interests of individuals in assisting them to understand how personal information is being processed by data controllers.
The University must re-new its notification with the ICO each year. If you think that the processing of personal data that you/your department is undertaking is not covered by the Notification it is essential that you contact the DP Office to inform them of this. The DP Office will update the Notification accordingly.
The University’s registration number in the ICO’s register of data controllers is Z5964973.
To search the register of data controllers to see the full Notification see the ICO’s website.