The role of the statutory Data Protection Officer
Intercollegiate Services Limited has been appointed by each of the 31 Cambridge Colleges to fulfill the role and functions of the statutory Data Protection Officer, as it is set out in the UK data protection legislation.
The statutory Data Protection Officer is not a role directly related to, or responsible for, the operational activities of any College. Its functions include:
- informing and advising a College's senior management, and its Fellows and staff who process personal information, of their obligations under the UK GDPR, DPA 2018, and DUAA;
- monitoring the College's engagement with the data protection legislation and the extent to which its policies, procedures and practices are in line with them;
- undertaking regular audits to monitor compliance with its relevant policies, procedures and practices, and to review, and advise on, matters including internal awareness-raising and training of College members;
- providing advice, where requested by the College, on any required data protection impact assessments;
- acting as the contact point for, and cooperating with as appropriate, the Information Commissioner's Office, the UK's data protection supervisory authority;
- having due regard in all of the College's functions to the risks involved in personal information processing, taking into account the nature, scope, context and purposes of processing.
If the College processes your personal information in any way, as the statutory Data Protection Officer, the Intercollegiate Services Limited also offers a point of relative independence for you to enquire about any issues or concerns related to the processing of your personal data.
Your rights
You have a number of rights under the UK GDPR, DPA 2018, and DUAA. Not all of these rights are automatic; most will require some dialogue with the College about how best to address your concerns. The College reserves the right, however, to discuss with you why it might not comply with a request from you in relation to your rights.
Your rights include:
- the right to ask the College for access to the personal information that it holds about you;
- the right to request that such personal information be rectified (corrected) or erased;
- the right to to request that your personal information be restricted, and that the College should not process it for specific purposes (especially pending any concerns about its accuracy or relevance);
- in some limited circumstances, the right to ask for the transfer of your personal information electronically to a third party (data portability).
In addition, you have the right to object to the receipt of communications from the College, particularly where these do not relate directly to non-marketing services that it is providing.
Raising concerns
In most cases, if you have questions or concerns about your personal information, or how it used, we will advise that in the first instance you speak to the College members or staff responsible for managing that information (e.g. the Tutorial Office, the Bursary, the Development Office).
If you need further guidance, or wish to seek a more independent view in the first instance, please get in touch with us by telephone: 01223 768745 or email dpo@isl.colleges.cam.ac.uk or by writing to us at:
64 Bridge Street
Cambridge
CB2 1UR
If you remain unhappy with the way your information is being handled, or with the response received from the College or Intercollegiate Services Limited, you have the right to lodge a complaint with the Information Commissioner’s Office at:
Wycliffe House
Water Lane
Wilmslow
SK9 5AF
