Data Protection: Registration
The University of York is a registered data controller under the terms of the Data Protection Act. Its registration number is Z4855807.
The University's registration, and notification of its uses of personal data, can be viewed as part of the Public Register of Data Controllers maintained by the Information Commissioner's Office.
Notification
The University has a duty to keep its register entry up-to-date and in line with its use of personal data. Where you use personal data to assist you in carrying out your job or research, where you or your department are collecting, using or processing personal information in a new way or for a new purpose, information on the purpose, type of data involved and the recipients of those data must be notified to the Information Commissioner and our registration updated accordingly.
, 348kb) is available to assist data owners with this process. The Records Manager can provide fuller details of the Act and requirements for notification and assist with the process. The University's register entry can only be updated and amended through this office. Further supporting guidance is available from the Information Commissioner and the notification handbook. Any members of staff who are uncertain as to whether their activities or proposed activities are included in the University's Notification or who are, or intend, processing data for purposes not included in the University's Notification should seek advice from the Records Manager.