Coronavirus (COVID-19) update

What is Data Protection?

The purpose of data protection legislation is to ensure that personal data is not processed without the knowledge and, except in certain cases, the consent of the data subject, to ensure that personal data which is processed is accurate, and to enforce a set of standards for the processing of such information.

Unlike the previous Act, the 1998 Act covers data held in manual files as well as computer files, although not all the provisions apply immediately to existing manual files. It is, however, University policy that as far as is possible all records will comply with the provisions of the Act.

Data subjects have the right to check the validity of the data held about them by Bangor University. By submitting a request in writing and paying the fee required the data subject may obtain a copy of data held about him/her.

The appropriate form for making a data subject access request can be found by clicking on Guide to Requesting Information from the University in the navigation bar above.

BU also accept initial contact with regard to subject access requests via e-mail which can be done here .However should you decide to submit your request by e-mail please supply a contact address so that we can contact you should we require further information. Please bear in mind that a fee is payable whether you submit your request by electronic means or by post and also bear in mind that at present BU does not send out the information requested by electronic means.

Some kinds of personal data are exempt from the provisions of the Act, and there are some exceptions to the data subject's right of access.

The requirements under the Act are administered by Gwenan Hine, Senior Assistant Regsitrar.

The relevant HESA Collection Notices for both staff and students can be found here:


Staff Member