Skip to main content
University of Bath

Tom Rottinghuis Data Protection Officer

Tom Rottinghuis is the University's Data Protection Officer.

Role

Tom is the University’s Data Protection Officer (DPO), our independent expert responsible for advising the University on data protection laws and best practise. He monitors internal compliance with UK GDPR and acts as the primary point of contact for any questions, suggestions and concerns people may have about how the University processes personal data [updated 06/2026].

Related posts

  • Promoting a culture of data protection at the University.
  • Working with colleagues to create Data Protection Impact Assessments (DPIAs) to ensure that data processing is conducted fairly, transparently, and securely.
  • Responding to Subject Access Requests (SARs).
  • Investigating and responding to personal data breaches.
  • Assisting colleagues in being compliant with privacy regulations.

Career

Tom Rottinghuis joins us from The Forward Trust, a national social justice charity dedicated to empowering individuals to break the cycles of addiction, crime, homelessness, and long-term unemployment. The Forward Trust works at the crossroads of several highly regulated sectors and processes extensive special category, criminal offense, and other highly sensitive data of over 150,000 service users.

Besides his statutory duties as their DPO, Tom supported the charity in achieving ISO 27001:2022 certification and played a key role in the charity’s journey to responsibly adopt AI and other innovative systems. Tom also worked as DPO and in related roles for several other CQC-regulated charities, and for Brussels’ public libraries. Before pivoting into Data Protection, Tom worked for international non-profits and in the European Parliament.