University Audit Process
How do School/Service Contacts Check that the University Complies with the Data Protection Act?
Biennial audits take place in the University every 2 years to check that the University is still complying with the data protection legislation.
Data Protection Audit
The responsibility for conducting Data Protection Audits in the University is devolved to the relevant Heads of Schools and Services who ensure that the Audit is conducted by the Freedom of Information / Data Protection Contact for their School or Service.
View the Role of the Data Protection Contact in Data Protection Code of Practice
What Guidelines/Procedures are in Place?
Assistance with Completing the Audit
Freedom of Information / Data Protection Contacts have been provided with guidance on steps they should take to audit University procedures to ensure that they comply with the Data Protection Act.
Two forms have been designed to carry out this Audit.
View University Procedures Audit Form (2)
An Audit form is provided for them to certify that this Audit has been completed.
View Audit Certificate (Word Document)
External Guidance Available
The University uses guidance from the Information Commissioner's Office when organising these audits.
Advice on Documentation
Freedom of Information / Data Protection Contacts should remind School / Service staff annually of the need to keep their literature up-to-date to ensure compliance with the Data Protection Act.





