Data protection

The Data Protection Act provides individuals with the right to know what information is held about them by the University and get access to it. Our Data Protection Policy.

The Data Protection Officer manages requests for personal information and provides guidance and support to staff, students and individuals to ensure the University is in compliance with the Act.

In May 2018 The General Data Protection Regulation (GDPR) came into force in the EU and a new UK Data Protection Act 2018 (implementing the GDPR in the UK) replaced the old 1998 Data Protection Act (DPA).

Request personal information

You can obtain copies of information that we hold about you by submitting a Subject Access Request to the Data Protection Officer: dataprotection@bath.ac.uk.

Report a breach

Data Protection applies to all staff. A serious breach of one or more of the Data Protection principles can result in a fine of up to £17 million from the Information Commissioner. Individuals can also face criminal charges under certain conditions.

If you think there has been a breach, or potential for a breach, of the Act, then you must follow our guidance and report it immediately.