Data protection

Corporate and Departmental Privacy Notices

Corporate Privacy Statement (CPS)

We have one overarching Privacy Notice (as required by GDPR Article 13.1.) Underneath this are a number of Departmental Privacy Notices (DPNs)  that provide specific information about the way each department collects and processes personal data.

Departmental Privacy Notices (DPNs)

Where departments process specific personal data sets, either because of the service they provide or the legislation they work under, they publish further information about the specific circumstances and context in which the personal data are processed (as required by GDPR Recital 60 and Article13.2)