Data Protection Law

Under Data Protection Law, personal data includes all recorded information about a living, identifiable individual. Students using personal data as part of their studies must comply with the responsibilities as outlined in the linked guidance. Before using personal data as part of their studies students must become familiar with the linked guidance, discuss implications with their supervisor and seek appropriate ethics approval. They must also obtain consent from the data subjects to take part in their studies.  Failure to comply with the responsibilities is an offence against University discipline, and could lead to a breach of Data Protection Law. A data protection breach can cause distress to the people the information is about, and can harm relationships with research partners, stakeholders, and funding organisations. In severe circumstances the University could be sued, fined up to £20,000,000, and experience reputational damage.

Important information and guidance:

http://www.ed.ac.uk/records-management/data-protection/data-protection-policy

https://www.ed.ac.uk/records-management/data-protection/guidance-policies/student-responsibilities