Data Compliance Statement

At City, University of London, we take data protection regulations very seriously. Please read through this guidance on how to use GetHeard@City in a safe, responsible and professional manner.

‘Data’ includes any information, including:

Personal data: personal information relating to particular individuals, such as staff or students. In other words, any information about an identified, or identifiable, living individual. It can include their name, address, email address, date of birth or staff, bank or NI details, but also moving or still images of them, personal information contained in an audio-visual or audio recording, or an IP address associated with them.
Some personal data is ‘special category personal data’ and calls for particular treatment. This includes information about racial or ethnic, political opinions, religious or philosophical beliefs, trade union membership and genetic data, biometric data processed for the purpose of uniquely identifying a natural person, concerning health or data concerning a natural person’s sex life or sexual orientation.

What is a data breach?

Data breach is any event leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, data transmitted, stored or otherwise processed.

We want to avoid a confidentiality breach (disclosure of or unauthorised access to data) from taking place, for example:
- Sharing information that contains personal data from another student or staff.

Examples include:

Inadvertent sending of a post containing personal data (about a student or staff member) to a feedback board.
Revealing personal information held by City in a feedback post or comment.
Unauthorised access to another student’s GetHeard@City account

Further information on governing policies: